Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.437c8f317886eb1b8511d5255b65fa4e.exe

  • Size

    153KB

  • Sample

    231114-kpztlaae38

  • MD5

    437c8f317886eb1b8511d5255b65fa4e

  • SHA1

    93c6142edcd9d8cad36b3e1de844cebae029a9e4

  • SHA256

    390e44b87c75a3f81db80cd44aef7ba14145a7e70ab978d15919c2ba9e21cc2a

  • SHA512

    b9781c7f569c8a42ec6f81077f3ea8367e13c32687f5900497c18a07be982eb8d5cf16e9914fb31a90d99a59d20f18f2d015abde6cfb63a7f359503f75234172

  • SSDEEP

    3072:QHhlxKCo4dm+1UAEQGBcHN0OlaxP3DZyN/+oeRpxPdZFibDyxn:OP8d+mAHj05xP3DZyN1eRppzcexn

Malware Config

Targets

    • Target

      NEAS.437c8f317886eb1b8511d5255b65fa4e.exe

    • Size

      153KB

    • MD5

      437c8f317886eb1b8511d5255b65fa4e

    • SHA1

      93c6142edcd9d8cad36b3e1de844cebae029a9e4

    • SHA256

      390e44b87c75a3f81db80cd44aef7ba14145a7e70ab978d15919c2ba9e21cc2a

    • SHA512

      b9781c7f569c8a42ec6f81077f3ea8367e13c32687f5900497c18a07be982eb8d5cf16e9914fb31a90d99a59d20f18f2d015abde6cfb63a7f359503f75234172

    • SSDEEP

      3072:QHhlxKCo4dm+1UAEQGBcHN0OlaxP3DZyN/+oeRpxPdZFibDyxn:OP8d+mAHj05xP3DZyN1eRppzcexn

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks