Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.a4fc8...20.exe

windows7-x64

10

NEAS.a4fc8...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.a4fc83f235c39b04641da1887e582520.exe

  • Size

    121KB

  • Sample

    231105-y64qrsdh43

  • MD5

    a4fc83f235c39b04641da1887e582520

  • SHA1

    18db82bc9c4538433d12c91a4c06c0a018714874

  • SHA256

    75f7b1cf48bca0e4c9c1d2958a5a1918d053f3e743b57c80fe9be25443da1b96

  • SHA512

    bb1dc3bd24e13b514e7eba8bf46b7ec7ce40ff5517fbc48670b9c954fdbca2188a487adbceeaa4356da7321ac0b8b3a83334f0fb7c5fef5daa2678b59d8f5d21

  • SSDEEP

    3072:7w5FcI5A7SLYprCH1IXhJIZtsDTIFkkkk45dO7AJnD5tvv:kDcgLYpWCJIZtsFdOarvv

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.a4fc83f235c39b04641da1887e582520.exe

    • Size

      121KB

    • MD5

      a4fc83f235c39b04641da1887e582520

    • SHA1

      18db82bc9c4538433d12c91a4c06c0a018714874

    • SHA256

      75f7b1cf48bca0e4c9c1d2958a5a1918d053f3e743b57c80fe9be25443da1b96

    • SHA512

      bb1dc3bd24e13b514e7eba8bf46b7ec7ce40ff5517fbc48670b9c954fdbca2188a487adbceeaa4356da7321ac0b8b3a83334f0fb7c5fef5daa2678b59d8f5d21

    • SSDEEP

      3072:7w5FcI5A7SLYprCH1IXhJIZtsDTIFkkkk45dO7AJnD5tvv:kDcgLYpWCJIZtsFdOarvv

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks