Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.d0a41...a0.exe

windows7-x64

10

NEAS.d0a41...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d0a41c71d5864cd165494fda4e2f39a0.exe

  • Size

    368KB

  • Sample

    231102-vcan2sbb2x

  • MD5

    d0a41c71d5864cd165494fda4e2f39a0

  • SHA1

    a1bb0928b500c767a7793e0c764fdfb9c36072a7

  • SHA256

    1f4c1ec5b5dca4e4b32248e37013b259072ba73c18cb6215af3327d2d73a0f7b

  • SHA512

    d520ea88220b33d6715af69fdd19d60dd6561090268ecfc3e24ad7270533acc53f385974201bd958f59416ebfa54d9a0c8a493896b68143b2b90a76a2ac74c5d

  • SSDEEP

    6144:8hFdxz0369Fbbbbbb88OE4f9FIUpOVw86CmOJfTo9FIUIhrcflDMxy9FIUpOVw8w:YzDVaAD6RrI1+lDMEAD6Rr2NWL

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d0a41c71d5864cd165494fda4e2f39a0.exe

    • Size

      368KB

    • MD5

      d0a41c71d5864cd165494fda4e2f39a0

    • SHA1

      a1bb0928b500c767a7793e0c764fdfb9c36072a7

    • SHA256

      1f4c1ec5b5dca4e4b32248e37013b259072ba73c18cb6215af3327d2d73a0f7b

    • SHA512

      d520ea88220b33d6715af69fdd19d60dd6561090268ecfc3e24ad7270533acc53f385974201bd958f59416ebfa54d9a0c8a493896b68143b2b90a76a2ac74c5d

    • SSDEEP

      6144:8hFdxz0369Fbbbbbb88OE4f9FIUpOVw86CmOJfTo9FIUIhrcflDMxy9FIUpOVw8w:YzDVaAD6RrI1+lDMEAD6Rr2NWL

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks