Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.f3c85...60.exe

windows7-x64

10

NEAS.f3c85...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f3c859aa85c3f306d72a2fa763d86f60.exe

  • Size

    227KB

  • Sample

    231103-jptf5sgb52

  • MD5

    f3c859aa85c3f306d72a2fa763d86f60

  • SHA1

    cc210ec8c5a9f7c870fc698228925f3911e656d0

  • SHA256

    c90e074d1f8a32b6f307a4e5e1349f31101d1c583feefaf39a463e89f2fdefcb

  • SHA512

    4242736f1e5ba09fd47fd3a5772a0ca989706e88f3a9a9957aa4626b04594c06c480af4c55d90c3ba486ea4f06ea7ef250bfc104e1e088bdfbc6eb4508ec6b9b

  • SSDEEP

    3072:H9C0R5/8972lZE1BP8eyPpwoTRBmDRGGurhUXvBj2QE2HegPelTeIdI7jFHu:rR5/8X3xm7U5j2QE2+g24Id2jFHu

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f3c859aa85c3f306d72a2fa763d86f60.exe

    • Size

      227KB

    • MD5

      f3c859aa85c3f306d72a2fa763d86f60

    • SHA1

      cc210ec8c5a9f7c870fc698228925f3911e656d0

    • SHA256

      c90e074d1f8a32b6f307a4e5e1349f31101d1c583feefaf39a463e89f2fdefcb

    • SHA512

      4242736f1e5ba09fd47fd3a5772a0ca989706e88f3a9a9957aa4626b04594c06c480af4c55d90c3ba486ea4f06ea7ef250bfc104e1e088bdfbc6eb4508ec6b9b

    • SSDEEP

      3072:H9C0R5/8972lZE1BP8eyPpwoTRBmDRGGurhUXvBj2QE2HegPelTeIdI7jFHu:rR5/8X3xm7U5j2QE2+g24Id2jFHu

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks