Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.ad648...9b.exe

windows7-x64

10

NEAS.ad648...9b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.ad6486ab539ef8c5242545f39e5b4d9b.exe

  • Size

    130KB

  • Sample

    231107-q93zmsfg7s

  • MD5

    ad6486ab539ef8c5242545f39e5b4d9b

  • SHA1

    9a4dd679d631a579039ce09b600660795f34fd26

  • SHA256

    4a64fbbb0eb089dd969c7ef200bbb7bda6eb82d17e3ca311b74fb188ba6ee75d

  • SHA512

    c40fb5f8b84c23b0263a7c538e78fd65e93bf13be57df4f7316940f6f7c09d6beb8657ace692cb2e3d287d37f14506dbca65a30968e2cba5539ac8038cff151b

  • SSDEEP

    3072:YoPrweRjL6GB2/BhHmiImXJ2fYdV46nfPyxWhj8NCM/4:VrweAm4BhHmNEcYj9nhV8NCV

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.ad6486ab539ef8c5242545f39e5b4d9b.exe

    • Size

      130KB

    • MD5

      ad6486ab539ef8c5242545f39e5b4d9b

    • SHA1

      9a4dd679d631a579039ce09b600660795f34fd26

    • SHA256

      4a64fbbb0eb089dd969c7ef200bbb7bda6eb82d17e3ca311b74fb188ba6ee75d

    • SHA512

      c40fb5f8b84c23b0263a7c538e78fd65e93bf13be57df4f7316940f6f7c09d6beb8657ace692cb2e3d287d37f14506dbca65a30968e2cba5539ac8038cff151b

    • SSDEEP

      3072:YoPrweRjL6GB2/BhHmiImXJ2fYdV46nfPyxWhj8NCM/4:VrweAm4BhHmNEcYj9nhV8NCV

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks