Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.3648d...10.exe

windows7-x64

10

NEAS.3648d...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.3648de129b3b5bf389ca3bd333655110.exe

  • Size

    109KB

  • Sample

    231111-fm5jvaba5s

  • MD5

    3648de129b3b5bf389ca3bd333655110

  • SHA1

    bc04de4f1d582ef8c69ac38f2cc7f19c8632cdf4

  • SHA256

    91a6c510db0e99ce12c28e85573001684ec23c62aea18166b27ad56d075ac5c8

  • SHA512

    52b0ecfc1bbd7074a52d8445f20cca470bd76b3e1593682b46a9bc6f8920b25d92ed9d3014019b1d64f68e2ba8255bbcdba2c283665aeae9aab94cd43387feac

  • SSDEEP

    3072:axJQ7TWO+29ZskoJ9HLCqwzBu1DjHLMVDqqkSpR:VTWrCuJ97wtu1DjrFqhz

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.3648de129b3b5bf389ca3bd333655110.exe

    • Size

      109KB

    • MD5

      3648de129b3b5bf389ca3bd333655110

    • SHA1

      bc04de4f1d582ef8c69ac38f2cc7f19c8632cdf4

    • SHA256

      91a6c510db0e99ce12c28e85573001684ec23c62aea18166b27ad56d075ac5c8

    • SHA512

      52b0ecfc1bbd7074a52d8445f20cca470bd76b3e1593682b46a9bc6f8920b25d92ed9d3014019b1d64f68e2ba8255bbcdba2c283665aeae9aab94cd43387feac

    • SSDEEP

      3072:axJQ7TWO+29ZskoJ9HLCqwzBu1DjHLMVDqqkSpR:VTWrCuJ97wtu1DjrFqhz

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks