Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.f10a5...90.exe

windows7-x64

10

NEAS.f10a5...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f10a5c9bc8bbb7aa2e8b11a0b1f9fb90.exe

  • Size

    362KB

  • Sample

    231117-chfhdadc93

  • MD5

    f10a5c9bc8bbb7aa2e8b11a0b1f9fb90

  • SHA1

    e82fc9c66d33533d97f6e8b37e2a6ab14c88f28f

  • SHA256

    a6563c4ca00bca88da3df5573d123df9d0af7948077fac086d870336eba6bf0c

  • SHA512

    2b7771f9f1e45d514eafea22d240f965b22c651a5a9e1842d32b6238dc768323b63724622fb23b0701e89a64acda7549c55b6ba4fab19f6ad9b8161fe8121076

  • SSDEEP

    6144:Pdj0bnMIdtGDuMEUrQVad7nG3mbDp2o+SsmiMyhtHEyr5psPc1aj8DOvlvuZxris:1j0PtmuMtrQ07nGWxWSsmiMyh95r5OPS

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f10a5c9bc8bbb7aa2e8b11a0b1f9fb90.exe

    • Size

      362KB

    • MD5

      f10a5c9bc8bbb7aa2e8b11a0b1f9fb90

    • SHA1

      e82fc9c66d33533d97f6e8b37e2a6ab14c88f28f

    • SHA256

      a6563c4ca00bca88da3df5573d123df9d0af7948077fac086d870336eba6bf0c

    • SHA512

      2b7771f9f1e45d514eafea22d240f965b22c651a5a9e1842d32b6238dc768323b63724622fb23b0701e89a64acda7549c55b6ba4fab19f6ad9b8161fe8121076

    • SSDEEP

      6144:Pdj0bnMIdtGDuMEUrQVad7nG3mbDp2o+SsmiMyhtHEyr5psPc1aj8DOvlvuZxris:1j0PtmuMtrQ07nGWxWSsmiMyh95r5OPS

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks