Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.e4964...50.exe

windows7-x64

10

NEAS.e4964...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e49647ccdfc4e7f81abc2f74012db550.exe

  • Size

    300KB

  • Sample

    231113-gs3swaad4t

  • MD5

    e49647ccdfc4e7f81abc2f74012db550

  • SHA1

    26f0be9ff80a20a181e6aea7b447a953ed635628

  • SHA256

    4239acb7b894cd4fdc88751e2b53bc30f6d0a9a0ce4426af5acb046d88484d34

  • SHA512

    3312adf622d9432057b06325c9489a9ab154b164cc7e065226b6165cec183d31e0aab84fa571d9ee6c52ddc68af7cfd6d837f0b4b948c7b142d2ca4c29bbf249

  • SSDEEP

    6144:LQ81hz9+eoq6OA4h2jvosK6mUzW0jAWRD2jvosK6mUzWh1T+/wPBfn8p:7h7oqw4hx67fLx67EZ+/CBfg

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.e49647ccdfc4e7f81abc2f74012db550.exe

    • Size

      300KB

    • MD5

      e49647ccdfc4e7f81abc2f74012db550

    • SHA1

      26f0be9ff80a20a181e6aea7b447a953ed635628

    • SHA256

      4239acb7b894cd4fdc88751e2b53bc30f6d0a9a0ce4426af5acb046d88484d34

    • SHA512

      3312adf622d9432057b06325c9489a9ab154b164cc7e065226b6165cec183d31e0aab84fa571d9ee6c52ddc68af7cfd6d837f0b4b948c7b142d2ca4c29bbf249

    • SSDEEP

      6144:LQ81hz9+eoq6OA4h2jvosK6mUzW0jAWRD2jvosK6mUzWh1T+/wPBfn8p:7h7oqw4hx67fLx67EZ+/CBfg

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks