Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.a25f3...70.exe

windows7-x64

10

NEAS.a25f3...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.a25f3fb799e57e87d254374a4cb65570.exe

  • Size

    169KB

  • Sample

    231111-fpjp6acb76

  • MD5

    a25f3fb799e57e87d254374a4cb65570

  • SHA1

    b37dcb005bbad17839f87102d4286859e6e19ecd

  • SHA256

    a1b42c0fe843ef24249c24a1034ab662f16d3b995ecc2b2eeb1081a8f9419bd0

  • SHA512

    c001a0f4159df5b9bf2660c68c49a115262e40103d75de97786e1a221121855071118da511d4458901c03385fb54ec545c41e1e983e48ddff28054bdc06a2a1a

  • SSDEEP

    3072:8w8fc4nBwmPxMeEvPOdgujv6NLPfFFrKP92f65Ha:8w8EcwmJML3OdgawrFZKPf9

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.a25f3fb799e57e87d254374a4cb65570.exe

    • Size

      169KB

    • MD5

      a25f3fb799e57e87d254374a4cb65570

    • SHA1

      b37dcb005bbad17839f87102d4286859e6e19ecd

    • SHA256

      a1b42c0fe843ef24249c24a1034ab662f16d3b995ecc2b2eeb1081a8f9419bd0

    • SHA512

      c001a0f4159df5b9bf2660c68c49a115262e40103d75de97786e1a221121855071118da511d4458901c03385fb54ec545c41e1e983e48ddff28054bdc06a2a1a

    • SSDEEP

      3072:8w8fc4nBwmPxMeEvPOdgujv6NLPfFFrKP92f65Ha:8w8EcwmJML3OdgawrFZKPf9

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks