Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.23ca8...e0.exe

windows7-x64

10

NEAS.23ca8...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.23ca897d7ecc42250619a2097fd017e0.exe

  • Size

    3.4MB

  • Sample

    231107-tq4zdabe6z

  • MD5

    23ca897d7ecc42250619a2097fd017e0

  • SHA1

    e7c40703dffd313ecf6a318172e20de8e7008a62

  • SHA256

    9c36fc7bc05eef374ca16879f0ea870ca9d678a9a257c266cc8bedd8b7a7cfc0

  • SHA512

    21c8510e22426c0fcb969032c0530094fad5d39e93468eeeef481e2a1aec6c9f9392bdfb14660cc62882c56ce4211db81a26daea340b8ee437df070f5c8d11b2

  • SSDEEP

    98304:A5VP91v92W805IPSOdKgzEoxr157JT6zPKnllYUugy:k91v92W805IPSOdKgzEoxr157JT6z6Y

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.23ca897d7ecc42250619a2097fd017e0.exe

    • Size

      3.4MB

    • MD5

      23ca897d7ecc42250619a2097fd017e0

    • SHA1

      e7c40703dffd313ecf6a318172e20de8e7008a62

    • SHA256

      9c36fc7bc05eef374ca16879f0ea870ca9d678a9a257c266cc8bedd8b7a7cfc0

    • SHA512

      21c8510e22426c0fcb969032c0530094fad5d39e93468eeeef481e2a1aec6c9f9392bdfb14660cc62882c56ce4211db81a26daea340b8ee437df070f5c8d11b2

    • SSDEEP

      98304:A5VP91v92W805IPSOdKgzEoxr157JT6zPKnllYUugy:k91v92W805IPSOdKgzEoxr157JT6z6Y

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks