Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.371ff...30.exe

windows7-x64

10

NEAS.371ff...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.371ff505f19cf0ba344566917e9fc530.exe

  • Size

    104KB

  • Sample

    231105-x6w59acg96

  • MD5

    371ff505f19cf0ba344566917e9fc530

  • SHA1

    71615e20b89a3e8d6054b47e2abdbdd3bcfef429

  • SHA256

    6eac5bdae8f964d34b289c7da4ec13ba83a4de681fd1037a465c58e3cb4766ea

  • SHA512

    92f81681f4ae00d48461177e6ac48c5a190f8050ae6c48f45037bfce1033588c38c5d8baf39460c143a811af83861ea9f71db6a5521f0d1f643ce9cf92dd4a8e

  • SSDEEP

    3072:WgwE1nXRpL6Ae5Jx7cEGrhkngpDvchkqbAIQS:LFNL6b5Jx4brq2Ahn

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.371ff505f19cf0ba344566917e9fc530.exe

    • Size

      104KB

    • MD5

      371ff505f19cf0ba344566917e9fc530

    • SHA1

      71615e20b89a3e8d6054b47e2abdbdd3bcfef429

    • SHA256

      6eac5bdae8f964d34b289c7da4ec13ba83a4de681fd1037a465c58e3cb4766ea

    • SHA512

      92f81681f4ae00d48461177e6ac48c5a190f8050ae6c48f45037bfce1033588c38c5d8baf39460c143a811af83861ea9f71db6a5521f0d1f643ce9cf92dd4a8e

    • SSDEEP

      3072:WgwE1nXRpL6Ae5Jx7cEGrhkngpDvchkqbAIQS:LFNL6b5Jx4brq2Ahn

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks