Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.0e182...e0.exe

windows7-x64

10

NEAS.0e182...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.0e1822273849b07aef5a4c4a791f10e0.exe

  • Size

    300KB

  • Sample

    231116-1f7qvafh44

  • MD5

    0e1822273849b07aef5a4c4a791f10e0

  • SHA1

    5340b08effad70213d13287e095d1ebdb282966c

  • SHA256

    b0442955d78060f9d9e0dba3be10701912711e3eb4861d578d524dafde5de3ce

  • SHA512

    895828245a3123d0ee7c5a6d5837436f5c24b4f112bf8fa9fd01d4e915ab317d11f68f2c33796bc84927d268da315ec23673a978368ff3ed28449486c79a71fa

  • SSDEEP

    6144:6zDs6SrvqufhcmoZjwszeXmr8SeNpgdyuH1l+/Wd:Z6iymCjb87g4/c

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.0e1822273849b07aef5a4c4a791f10e0.exe

    • Size

      300KB

    • MD5

      0e1822273849b07aef5a4c4a791f10e0

    • SHA1

      5340b08effad70213d13287e095d1ebdb282966c

    • SHA256

      b0442955d78060f9d9e0dba3be10701912711e3eb4861d578d524dafde5de3ce

    • SHA512

      895828245a3123d0ee7c5a6d5837436f5c24b4f112bf8fa9fd01d4e915ab317d11f68f2c33796bc84927d268da315ec23673a978368ff3ed28449486c79a71fa

    • SSDEEP

      6144:6zDs6SrvqufhcmoZjwszeXmr8SeNpgdyuH1l+/Wd:Z6iymCjb87g4/c

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks