Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.fd00e...20.exe

windows7-x64

10

NEAS.fd00e...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.fd00e56db412361202c8ac60d6220920.exe

  • Size

    75KB

  • Sample

    231102-vd57cacc9y

  • MD5

    fd00e56db412361202c8ac60d6220920

  • SHA1

    c97f36dc01a8ba534758575d20d5332dd0902322

  • SHA256

    2bc757491363c0b85183c8a43e1120578412ece55bc82eac142ceffe93e6d806

  • SHA512

    ff49f0e2802566bc6b9db05a712b0cf4a93218bc7a5229c0a1d432a5c6cb7080742c38eca40a41de71521c978bbc6572b9b49e7ecfbdaceff8fef5dc68575d47

  • SSDEEP

    1536:nCDgSroow8CFasdMrhFoSl00000000000000R9C5UU5O53q52IrFH:CkATwjwXUo000000000000003ZYg3qv

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.fd00e56db412361202c8ac60d6220920.exe

    • Size

      75KB

    • MD5

      fd00e56db412361202c8ac60d6220920

    • SHA1

      c97f36dc01a8ba534758575d20d5332dd0902322

    • SHA256

      2bc757491363c0b85183c8a43e1120578412ece55bc82eac142ceffe93e6d806

    • SHA512

      ff49f0e2802566bc6b9db05a712b0cf4a93218bc7a5229c0a1d432a5c6cb7080742c38eca40a41de71521c978bbc6572b9b49e7ecfbdaceff8fef5dc68575d47

    • SSDEEP

      1536:nCDgSroow8CFasdMrhFoSl00000000000000R9C5UU5O53q52IrFH:CkATwjwXUo000000000000003ZYg3qv

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks