Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.18a68...47.exe

windows7-x64

10

NEAS.18a68...47.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.18a68b458dd02ca13467a28a5243bd47.exe

  • Size

    664KB

  • Sample

    231107-rfw5nshh82

  • MD5

    18a68b458dd02ca13467a28a5243bd47

  • SHA1

    70f8422c3268b38063569a3e38d80d04b5c33b45

  • SHA256

    6167a51b21bb76ad2a1b4575c009747aa17311e780015938ccde092ec531cb7c

  • SHA512

    6224d9202c158d7e7471bb0c242f16da85e9efdb57b939a35664fe20bcdd778ec5a313e852dcb7375c647a7538e59b0d129342579225e79e4cfdaf9e56b80a58

  • SSDEEP

    12288:LRpV6yYP4rbpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYjmR54F:LRW4XWleKWNUir2MhNl6zX3w9As/xO2k

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.18a68b458dd02ca13467a28a5243bd47.exe

    • Size

      664KB

    • MD5

      18a68b458dd02ca13467a28a5243bd47

    • SHA1

      70f8422c3268b38063569a3e38d80d04b5c33b45

    • SHA256

      6167a51b21bb76ad2a1b4575c009747aa17311e780015938ccde092ec531cb7c

    • SHA512

      6224d9202c158d7e7471bb0c242f16da85e9efdb57b939a35664fe20bcdd778ec5a313e852dcb7375c647a7538e59b0d129342579225e79e4cfdaf9e56b80a58

    • SSDEEP

      12288:LRpV6yYP4rbpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYjmR54F:LRW4XWleKWNUir2MhNl6zX3w9As/xO2k

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks