Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.8eb5f...00.exe

windows7-x64

10

NEAS.8eb5f...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.8eb5f8aa7bab88a7ae4c57ad08b24400.exe

  • Size

    256KB

  • Sample

    231113-dkbsmsgb8v

  • MD5

    8eb5f8aa7bab88a7ae4c57ad08b24400

  • SHA1

    b5c4376049ff44e141b25ad739bc941dd4e260e0

  • SHA256

    6559beb5eaec15dd604fb500513fee22fb720788a60a0500402bdefed8734117

  • SHA512

    d56674ed79424b41457a4a9f1e11d42797056cee292e5f8db8a69b6379ea45f65dbfafe831df0a27011bcd564b6f747197ddd6783f53eed6e44b080f8331dbd8

  • SSDEEP

    6144:hX6MkB9C81NByvZ6Mxv5Rar3O6B9fZSLhZmzbBy9:VPa9C8HByvNv54B9f01ZmHBy9

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.8eb5f8aa7bab88a7ae4c57ad08b24400.exe

    • Size

      256KB

    • MD5

      8eb5f8aa7bab88a7ae4c57ad08b24400

    • SHA1

      b5c4376049ff44e141b25ad739bc941dd4e260e0

    • SHA256

      6559beb5eaec15dd604fb500513fee22fb720788a60a0500402bdefed8734117

    • SHA512

      d56674ed79424b41457a4a9f1e11d42797056cee292e5f8db8a69b6379ea45f65dbfafe831df0a27011bcd564b6f747197ddd6783f53eed6e44b080f8331dbd8

    • SSDEEP

      6144:hX6MkB9C81NByvZ6Mxv5Rar3O6B9fZSLhZmzbBy9:VPa9C8HByvNv54B9f01ZmHBy9

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks