Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.6f879480525a28260b6286c68083d950.exe

  • Size

    130KB

  • Sample

    231105-jpxtkacf61

  • MD5

    6f879480525a28260b6286c68083d950

  • SHA1

    95eddbfb3892420eb593d78a58071ffb4c53db73

  • SHA256

    dc3907841a1a8f715c0db01a00dcea75391cefc4cae6cc6c01f2e4d492dec2f0

  • SHA512

    32a78461ce9356c29e69a06ebc22859246d04622981ed6e2ec608f8c040410a53d90abc7b3880c1b06d0f248a0915732b24be7da38339f6c1e8008e2a7a6e7cd

  • SSDEEP

    3072:6ceCvaG02/BhHmiImXJ2fYdV46nfPyxWhj8NCM/4:LzvaL4BhHmNEcYj9nhV8NCV

Malware Config

Targets

    • Target

      NEAS.6f879480525a28260b6286c68083d950.exe

    • Size

      130KB

    • MD5

      6f879480525a28260b6286c68083d950

    • SHA1

      95eddbfb3892420eb593d78a58071ffb4c53db73

    • SHA256

      dc3907841a1a8f715c0db01a00dcea75391cefc4cae6cc6c01f2e4d492dec2f0

    • SHA512

      32a78461ce9356c29e69a06ebc22859246d04622981ed6e2ec608f8c040410a53d90abc7b3880c1b06d0f248a0915732b24be7da38339f6c1e8008e2a7a6e7cd

    • SSDEEP

      3072:6ceCvaG02/BhHmiImXJ2fYdV46nfPyxWhj8NCM/4:LzvaL4BhHmNEcYj9nhV8NCV

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks