Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.14c215510bdc1626421f7839c5d11ab2.exe

  • Size

    167KB

  • Sample

    231111-nqd53afd92

  • MD5

    14c215510bdc1626421f7839c5d11ab2

  • SHA1

    b7222dc9c954c6a13a375c25f97d865e5676cefc

  • SHA256

    0ace046350c51b2861948c7b267f426beeaba39e71ca6f7ed9a987c25d9f8735

  • SHA512

    d6019c542d79b1bcba9959d4542ccd7af8d2e39e358c2ac9e63db13d74870c27b5fb23d9e154285fb4f1a679f967ddbf1873f57795cfd60a82c63cb0deea9354

  • SSDEEP

    3072:4dEUfKj8BYbDiC1ZTK7sxtLUIGKxK/tDwXQw30naFYaCkKEfNqr:4USiZTK40uxKFLw+aFlKEfNI

Malware Config

Targets

    • Target

      NEAS.14c215510bdc1626421f7839c5d11ab2.exe

    • Size

      167KB

    • MD5

      14c215510bdc1626421f7839c5d11ab2

    • SHA1

      b7222dc9c954c6a13a375c25f97d865e5676cefc

    • SHA256

      0ace046350c51b2861948c7b267f426beeaba39e71ca6f7ed9a987c25d9f8735

    • SHA512

      d6019c542d79b1bcba9959d4542ccd7af8d2e39e358c2ac9e63db13d74870c27b5fb23d9e154285fb4f1a679f967ddbf1873f57795cfd60a82c63cb0deea9354

    • SSDEEP

      3072:4dEUfKj8BYbDiC1ZTK7sxtLUIGKxK/tDwXQw30naFYaCkKEfNqr:4USiZTK40uxKFLw+aFlKEfNI

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks