Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.34d48...JC.exe

windows7-x64

10

NEAS.34d48...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.34d48e93dd301462aa0efd0391538770_JC.exe

  • Size

    104KB

  • Sample

    231104-mq6dwagb2t

  • MD5

    34d48e93dd301462aa0efd0391538770

  • SHA1

    622297f7df0d5d6ebc9a94bb5def63e865a552ec

  • SHA256

    7cda44ebd64a2e068ab82b0bb0a03a9bb11151e5f3640108623c259390eae478

  • SHA512

    4159e1af1e57248752b01c32816471616ddb9d8a83fbbb5bcf33552797320ea471b919aecb60e6fb1a3a9b46458c773f0967d8612ac1a96eff00086a3a325ec9

  • SSDEEP

    3072:JMkKZhZUZGxy3e56x7cEGrhkngpDvchkqbAIQS:JMThZUwxyu56x4brq2Ahn

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.34d48e93dd301462aa0efd0391538770_JC.exe

    • Size

      104KB

    • MD5

      34d48e93dd301462aa0efd0391538770

    • SHA1

      622297f7df0d5d6ebc9a94bb5def63e865a552ec

    • SHA256

      7cda44ebd64a2e068ab82b0bb0a03a9bb11151e5f3640108623c259390eae478

    • SHA512

      4159e1af1e57248752b01c32816471616ddb9d8a83fbbb5bcf33552797320ea471b919aecb60e6fb1a3a9b46458c773f0967d8612ac1a96eff00086a3a325ec9

    • SSDEEP

      3072:JMkKZhZUZGxy3e56x7cEGrhkngpDvchkqbAIQS:JMThZUwxyu56x4brq2Ahn

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks