Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.dadc3...50.exe

windows7-x64

10

NEAS.dadc3...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.dadc34fa9c9d8e5237573c956f466250.exe

  • Size

    256KB

  • Sample

    231103-mq6pmsag29

  • MD5

    dadc34fa9c9d8e5237573c956f466250

  • SHA1

    1a9269e651636c59fed003cd7c2214bcd473c387

  • SHA256

    1d571d1565d574dbee1a3dd10787df83775159c851717b8fa7444572a81eafe4

  • SHA512

    c0546486339565d3f0465952e644dcc208d8fd5846e081e188f30d3e28068479f1a690326b4acdbc18946a8e91ea3dc037447ba7d98a2761d16a4afd24c54383

  • SSDEEP

    6144:swlBCQAn0Of4rQD85k/hQO+zrWnAdqjeOpKfduBU:sw/CQ00/rQg5W/+zrWAI5KFuU

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.dadc34fa9c9d8e5237573c956f466250.exe

    • Size

      256KB

    • MD5

      dadc34fa9c9d8e5237573c956f466250

    • SHA1

      1a9269e651636c59fed003cd7c2214bcd473c387

    • SHA256

      1d571d1565d574dbee1a3dd10787df83775159c851717b8fa7444572a81eafe4

    • SHA512

      c0546486339565d3f0465952e644dcc208d8fd5846e081e188f30d3e28068479f1a690326b4acdbc18946a8e91ea3dc037447ba7d98a2761d16a4afd24c54383

    • SSDEEP

      6144:swlBCQAn0Of4rQD85k/hQO+zrWnAdqjeOpKfduBU:sw/CQ00/rQg5W/+zrWAI5KFuU

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks