Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.a09de...10.exe

windows7-x64

10

NEAS.a09de...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.a09decd88d08fe92e71d9e94869a6f10.exe

  • Size

    161KB

  • Sample

    231105-3nm3hsgb26

  • MD5

    a09decd88d08fe92e71d9e94869a6f10

  • SHA1

    7e65ea80a1251a4b10837cf94008052c13f17347

  • SHA256

    f456c0635e79c96acbef08de0e70800b8b4972287192a7ca0aa07fcec38fa911

  • SHA512

    6725a8eeb16359bde30dcb83ceb5136cf8464f93e06cf980facf87c612939905e058bae6a06f6152ae99fe90402417a0821447c6bd6d6b91f50d701771cfcfae

  • SSDEEP

    3072:ZlkI4rgNPDtxz7aSNkWuMkMVwtCJXeex7rrIRZK8K8/kv:/k+pB7x+jMkMVwtmeetrIyR

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.a09decd88d08fe92e71d9e94869a6f10.exe

    • Size

      161KB

    • MD5

      a09decd88d08fe92e71d9e94869a6f10

    • SHA1

      7e65ea80a1251a4b10837cf94008052c13f17347

    • SHA256

      f456c0635e79c96acbef08de0e70800b8b4972287192a7ca0aa07fcec38fa911

    • SHA512

      6725a8eeb16359bde30dcb83ceb5136cf8464f93e06cf980facf87c612939905e058bae6a06f6152ae99fe90402417a0821447c6bd6d6b91f50d701771cfcfae

    • SSDEEP

      3072:ZlkI4rgNPDtxz7aSNkWuMkMVwtCJXeex7rrIRZK8K8/kv:/k+pB7x+jMkMVwtmeetrIyR

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks