Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.c6fff...63.exe

windows7-x64

10

NEAS.c6fff...63.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.c6fffa392a5a7e5ce8d9d4082bc37263.exe

  • Size

    77KB

  • Sample

    231116-vdbbzaef4y

  • MD5

    c6fffa392a5a7e5ce8d9d4082bc37263

  • SHA1

    8805b88824d9910c676b5a3da752807ecabc31c8

  • SHA256

    396262fb5959a2c33a0b4fb296da5933015112cc55e616e240327bd8b51759ca

  • SHA512

    c7c294f1b0ddb9380066dece2e9d8f4f0133585ae9fe1a60801974d5cf59e81bb8a0577beda06dd15308f199af71a5d1c0f9003f72018c84bf52779274f95104

  • SSDEEP

    1536:7ys8vQoyy6jyfwtkteDOKFHKwL5J2CUYITmZy2Lttwfi+TjRC/D:mFv/Z/eSKFHFrdZ/fwf1TjYD

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.c6fffa392a5a7e5ce8d9d4082bc37263.exe

    • Size

      77KB

    • MD5

      c6fffa392a5a7e5ce8d9d4082bc37263

    • SHA1

      8805b88824d9910c676b5a3da752807ecabc31c8

    • SHA256

      396262fb5959a2c33a0b4fb296da5933015112cc55e616e240327bd8b51759ca

    • SHA512

      c7c294f1b0ddb9380066dece2e9d8f4f0133585ae9fe1a60801974d5cf59e81bb8a0577beda06dd15308f199af71a5d1c0f9003f72018c84bf52779274f95104

    • SSDEEP

      1536:7ys8vQoyy6jyfwtkteDOKFHKwL5J2CUYITmZy2Lttwfi+TjRC/D:mFv/Z/eSKFHFrdZ/fwf1TjYD

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks