Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.e46defa507cca72d5d7f7a7b0a59f460.exe

  • Size

    227KB

  • Sample

    231103-jt51qsgc37

  • MD5

    e46defa507cca72d5d7f7a7b0a59f460

  • SHA1

    cbc51f0b2bcf034a8603ebaf8458bffdc51b0d61

  • SHA256

    40ec1590993d738c3fa3ad2c8c4928db5b2631890cc93ae38d54f37312548e32

  • SHA512

    e3834bb61827de1aa466d95a4640e1674db80d43912ee726b134374d30b09fd4f58696e3e4a00a735f511345052f3363c50ad945987f602c79489822c26210c5

  • SSDEEP

    6144:MSeL2oxrT+2DsrAm7U5j2QE2+g24Id2jFHu:MH26xs0iojj+Td20

Malware Config

Targets

    • Target

      NEAS.e46defa507cca72d5d7f7a7b0a59f460.exe

    • Size

      227KB

    • MD5

      e46defa507cca72d5d7f7a7b0a59f460

    • SHA1

      cbc51f0b2bcf034a8603ebaf8458bffdc51b0d61

    • SHA256

      40ec1590993d738c3fa3ad2c8c4928db5b2631890cc93ae38d54f37312548e32

    • SHA512

      e3834bb61827de1aa466d95a4640e1674db80d43912ee726b134374d30b09fd4f58696e3e4a00a735f511345052f3363c50ad945987f602c79489822c26210c5

    • SSDEEP

      6144:MSeL2oxrT+2DsrAm7U5j2QE2+g24Id2jFHu:MH26xs0iojj+Td20

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks