Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.cd478...e0.exe

windows7-x64

10

NEAS.cd478...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.cd478b7e94ecbb8dbd2bd293c86733e0.exe

  • Size

    492KB

  • Sample

    231103-ntmavahe41

  • MD5

    cd478b7e94ecbb8dbd2bd293c86733e0

  • SHA1

    d7692a69581aa38b57220556022b2b4a59ae83b5

  • SHA256

    ba352d3a246e29da919428f7e99a25decbf3ac3769b46b87f3e2f6c03eeab118

  • SHA512

    634f0b61e0296b219020e3cd6b8c6048415f2a5e6aaf645b20b5778879d431b4c3dd9e2b07ec11753c1bc6ec32c7d6032399cd4d061f1fdc25f44163537f0a56

  • SSDEEP

    12288:6hgSbWGRdA6sQhPbWGRdA6sQxuEuZH8bWGRdA6sQhPbWGRdA6sQyy:6hgSvzecvsy

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.cd478b7e94ecbb8dbd2bd293c86733e0.exe

    • Size

      492KB

    • MD5

      cd478b7e94ecbb8dbd2bd293c86733e0

    • SHA1

      d7692a69581aa38b57220556022b2b4a59ae83b5

    • SHA256

      ba352d3a246e29da919428f7e99a25decbf3ac3769b46b87f3e2f6c03eeab118

    • SHA512

      634f0b61e0296b219020e3cd6b8c6048415f2a5e6aaf645b20b5778879d431b4c3dd9e2b07ec11753c1bc6ec32c7d6032399cd4d061f1fdc25f44163537f0a56

    • SSDEEP

      12288:6hgSbWGRdA6sQhPbWGRdA6sQxuEuZH8bWGRdA6sQhPbWGRdA6sQyy:6hgSvzecvsy

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks