Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.08689...00.exe

windows7-x64

10

NEAS.08689...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.086894871b61c20da05e64f0e8264300.exe

  • Size

    1.4MB

  • Sample

    231117-gh63jsfh29

  • MD5

    086894871b61c20da05e64f0e8264300

  • SHA1

    9807a2360868764b8cf3cd7067e239eddcaa440a

  • SHA256

    518b570a5aa2183fbc7a9938a0527a63495a05a2d017bd4f993ef06f097e9984

  • SHA512

    e557fa3622f9ce7cc9a7e12c6fca0d0d713322cc176f78d90ba743b38d8ccd6731585d74b2bfcfb3d587d0c1b110d3446fa5804c0842a01174b2b674a56df562

  • SSDEEP

    24576:vf0Ph2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oWx4C2rCLoTXosUX:vubazR0vKLXZ8C2rCLo7onBZe2Iehrtr

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.086894871b61c20da05e64f0e8264300.exe

    • Size

      1.4MB

    • MD5

      086894871b61c20da05e64f0e8264300

    • SHA1

      9807a2360868764b8cf3cd7067e239eddcaa440a

    • SHA256

      518b570a5aa2183fbc7a9938a0527a63495a05a2d017bd4f993ef06f097e9984

    • SHA512

      e557fa3622f9ce7cc9a7e12c6fca0d0d713322cc176f78d90ba743b38d8ccd6731585d74b2bfcfb3d587d0c1b110d3446fa5804c0842a01174b2b674a56df562

    • SSDEEP

      24576:vf0Ph2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oWx4C2rCLoTXosUX:vubazR0vKLXZ8C2rCLo7onBZe2Iehrtr

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks