Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.f4339...JC.exe

windows7-x64

10

NEAS.f4339...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f4339c546a23baa72982ceb0f938fea0_JC.exe

  • Size

    565KB

  • Sample

    231104-y4p5laec2s

  • MD5

    f4339c546a23baa72982ceb0f938fea0

  • SHA1

    504c1e8be4be2f0c8f7f82e462c1257a670e4ddd

  • SHA256

    b1cc4212c5d6c7868e484c2fd00f50bb421cf0158772b8e23b05de56b93c9ceb

  • SHA512

    e869330c2ba5270d867d9c9af85f6d8ddb39eb59458e694b09d2ed218e099629822e152d7b1b8e1d54334a84991db11c0502264745ea69499a4d7435757c4ab1

  • SSDEEP

    12288:B3vtuFjAhC/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KF8OX:5tuFjAhCm0BmmvFimm09OX

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f4339c546a23baa72982ceb0f938fea0_JC.exe

    • Size

      565KB

    • MD5

      f4339c546a23baa72982ceb0f938fea0

    • SHA1

      504c1e8be4be2f0c8f7f82e462c1257a670e4ddd

    • SHA256

      b1cc4212c5d6c7868e484c2fd00f50bb421cf0158772b8e23b05de56b93c9ceb

    • SHA512

      e869330c2ba5270d867d9c9af85f6d8ddb39eb59458e694b09d2ed218e099629822e152d7b1b8e1d54334a84991db11c0502264745ea69499a4d7435757c4ab1

    • SSDEEP

      12288:B3vtuFjAhC/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KF8OX:5tuFjAhCm0BmmvFimm09OX

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks