Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.57b5a...10.exe

windows7-x64

10

NEAS.57b5a...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.57b5ab858685bc7671c40f0a2b571e10.exe

  • Size

    85KB

  • Sample

    231102-t8egfage9y

  • MD5

    57b5ab858685bc7671c40f0a2b571e10

  • SHA1

    ce0d4611e95b44d4b3105305df0a807d1f320967

  • SHA256

    a0411bd2f2519e92055b957287d95369c64bfb60aae88640687fc25aeab50963

  • SHA512

    d3bdba607af7b566f6eed61f0babd497cc25357fd48a0201d6367627b23c429fa17ca0e0ef9109781d5646535120e64a2a489163238581aac07ef664d8e6381b

  • SSDEEP

    1536:QmFowo/D90FaV2OTM6SueXr8oIRGksb7h92LHL1MQ262AjCsQ2PCZZrqOlNfVSLA:psrFDg6u78GBROHBMQH2qC7ZQOlzSLUN

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.57b5ab858685bc7671c40f0a2b571e10.exe

    • Size

      85KB

    • MD5

      57b5ab858685bc7671c40f0a2b571e10

    • SHA1

      ce0d4611e95b44d4b3105305df0a807d1f320967

    • SHA256

      a0411bd2f2519e92055b957287d95369c64bfb60aae88640687fc25aeab50963

    • SHA512

      d3bdba607af7b566f6eed61f0babd497cc25357fd48a0201d6367627b23c429fa17ca0e0ef9109781d5646535120e64a2a489163238581aac07ef664d8e6381b

    • SSDEEP

      1536:QmFowo/D90FaV2OTM6SueXr8oIRGksb7h92LHL1MQ262AjCsQ2PCZZrqOlNfVSLA:psrFDg6u78GBROHBMQH2qC7ZQOlzSLUN

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks