Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.7a131...JC.exe

windows7-x64

10

NEAS.7a131...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.7a131ee538dacb78ea4efc5d704004e0_JC.exe

  • Size

    236KB

  • Sample

    231102-qlyd9aec97

  • MD5

    7a131ee538dacb78ea4efc5d704004e0

  • SHA1

    42be854413dd5305f621d7b9fa5d1406de68108e

  • SHA256

    7a41891a54f0f2485c189e9cec9fc354f494b2dd8fba4dc13ceef228aa0af81a

  • SHA512

    73c284beccd1fda4d08bdef346b3698108a48405f227d53a53235991716ae1b5612ca03ff92585052dcc35f986ab3240d842ae90b055d53bb67dafe0595a29f9

  • SSDEEP

    3072:+t3GX+J96xNwT5Ln4J9IDlRxyhTbhgu+tAcrbFAJc+RsUi1aVDkOvhJjvJUp:Yt35J4sDshsrtMsQB4

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.7a131ee538dacb78ea4efc5d704004e0_JC.exe

    • Size

      236KB

    • MD5

      7a131ee538dacb78ea4efc5d704004e0

    • SHA1

      42be854413dd5305f621d7b9fa5d1406de68108e

    • SHA256

      7a41891a54f0f2485c189e9cec9fc354f494b2dd8fba4dc13ceef228aa0af81a

    • SHA512

      73c284beccd1fda4d08bdef346b3698108a48405f227d53a53235991716ae1b5612ca03ff92585052dcc35f986ab3240d842ae90b055d53bb67dafe0595a29f9

    • SSDEEP

      3072:+t3GX+J96xNwT5Ln4J9IDlRxyhTbhgu+tAcrbFAJc+RsUi1aVDkOvhJjvJUp:Yt35J4sDshsrtMsQB4

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks