Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.ee8e1ebd96b492a9b603eaf8d7b15be0.exe

  • Size

    121KB

  • Sample

    231117-1xca9seg23

  • MD5

    ee8e1ebd96b492a9b603eaf8d7b15be0

  • SHA1

    5642c2b23bb81d4d83c5c7a8ef9326a32eb9980c

  • SHA256

    fc47a7c5ff80453670fcd4b420da9627c8039e7f4db2b5fd4684caf59b4c9721

  • SHA512

    c5a6881d2af97fc2e7345d981f86297b0d8e0974102cdbc604307170dfd8b25145f6572132d6201fad427c9c5d7d191eb7a3b5faa7ba34058fda8663f8f4f4d2

  • SSDEEP

    1536:voByD43ypZBeHeMGKPdtbv3zYC0h1euSn5VkZxzyCV19zQYOd5ijJnD5ir3oGui4:voBZOr2/jui5VqxbO7AJnD5tvv

Malware Config

Targets

    • Target

      NEAS.ee8e1ebd96b492a9b603eaf8d7b15be0.exe

    • Size

      121KB

    • MD5

      ee8e1ebd96b492a9b603eaf8d7b15be0

    • SHA1

      5642c2b23bb81d4d83c5c7a8ef9326a32eb9980c

    • SHA256

      fc47a7c5ff80453670fcd4b420da9627c8039e7f4db2b5fd4684caf59b4c9721

    • SHA512

      c5a6881d2af97fc2e7345d981f86297b0d8e0974102cdbc604307170dfd8b25145f6572132d6201fad427c9c5d7d191eb7a3b5faa7ba34058fda8663f8f4f4d2

    • SSDEEP

      1536:voByD43ypZBeHeMGKPdtbv3zYC0h1euSn5VkZxzyCV19zQYOd5ijJnD5ir3oGui4:voBZOr2/jui5VqxbO7AJnD5tvv

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.