Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.325fd...JC.exe

windows7-x64

10

NEAS.325fd...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.325fd065dbdefb8eb2fb65f1df2e5130_JC.exe

  • Size

    106KB

  • Sample

    231104-3yr48aae53

  • MD5

    325fd065dbdefb8eb2fb65f1df2e5130

  • SHA1

    5c83a2dc4cc2f7e1a054643697ac1af27f413560

  • SHA256

    a8b4f62b074ab8464eafbada147ebd957cb071394eb0616cd53a15f7d7665763

  • SHA512

    eeb9a7d632571ae7e63dc66294135ca16f6a651af56d141d5be394a81403d9e22379799cbba09ec05b23efe3fc46a711ea959aab6d3a9591ca67ddacba7114ed

  • SSDEEP

    3072:PuvimJB+lcPeePq1U9zH4QrXY1WdTCn93OGey/ZhC:mviYB+lcPwWzYQrX3TCndOGeKY

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.325fd065dbdefb8eb2fb65f1df2e5130_JC.exe

    • Size

      106KB

    • MD5

      325fd065dbdefb8eb2fb65f1df2e5130

    • SHA1

      5c83a2dc4cc2f7e1a054643697ac1af27f413560

    • SHA256

      a8b4f62b074ab8464eafbada147ebd957cb071394eb0616cd53a15f7d7665763

    • SHA512

      eeb9a7d632571ae7e63dc66294135ca16f6a651af56d141d5be394a81403d9e22379799cbba09ec05b23efe3fc46a711ea959aab6d3a9591ca67ddacba7114ed

    • SSDEEP

      3072:PuvimJB+lcPeePq1U9zH4QrXY1WdTCn93OGey/ZhC:mviYB+lcPwWzYQrX3TCndOGeKY

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks