Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.d63ca...70.exe

windows7-x64

10

NEAS.d63ca...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d63ca0c74ce24dc6f41da6cb25ec5970.exe

  • Size

    378KB

  • Sample

    231102-jpqp9ahc2y

  • MD5

    d63ca0c74ce24dc6f41da6cb25ec5970

  • SHA1

    705923c75e86bb430a109743775181abbf5b64f3

  • SHA256

    a198fc3129f9723c1d834a456d16869271c38f34b887e4d99393649beb08e888

  • SHA512

    30c693a6b7521d50d1312f32d93594902591f0f0aa82279ebee995af9ef439a7592089316334165392c9fcab53ea8465439994cbad7aac43f0110daded3e93e6

  • SSDEEP

    6144:YDT4pffWg5YE2eYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42Gp:YX48S2eYr75lTefkY660fIaDZkY660fR

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d63ca0c74ce24dc6f41da6cb25ec5970.exe

    • Size

      378KB

    • MD5

      d63ca0c74ce24dc6f41da6cb25ec5970

    • SHA1

      705923c75e86bb430a109743775181abbf5b64f3

    • SHA256

      a198fc3129f9723c1d834a456d16869271c38f34b887e4d99393649beb08e888

    • SHA512

      30c693a6b7521d50d1312f32d93594902591f0f0aa82279ebee995af9ef439a7592089316334165392c9fcab53ea8465439994cbad7aac43f0110daded3e93e6

    • SSDEEP

      6144:YDT4pffWg5YE2eYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42Gp:YX48S2eYr75lTefkY660fIaDZkY660fR

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks