Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.b49d9...70.exe

windows7-x64

10

NEAS.b49d9...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.b49d9f89f345aa7d9fe52ecc8aeba870.exe

  • Size

    8.4MB

  • Sample

    231117-xtt55aeb3x

  • MD5

    b49d9f89f345aa7d9fe52ecc8aeba870

  • SHA1

    4c83772de80fdfa25dfbe56fd975a9dac66af994

  • SHA256

    09e27817ba8f3b75a6cae7e8f66ecfd524058a522923fd90ac0fe7e821935ea7

  • SHA512

    e820c696a90ce86ee2abf78907d11df2ae3d13d0e7e750ca581668f1cabde2d2490bb7ee9d3293b88c5ffe5ee81c580c255041e9f68b28be307cf6a7808183c7

  • SSDEEP

    196608:UaSHFaZRBEYyqmS2DiHPKQgwUgUjvho4wzlF65i6YxE+a6Y:UaSHFaZRBEYyqmS2DiHPKQg3jvZwNVOV

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.b49d9f89f345aa7d9fe52ecc8aeba870.exe

    • Size

      8.4MB

    • MD5

      b49d9f89f345aa7d9fe52ecc8aeba870

    • SHA1

      4c83772de80fdfa25dfbe56fd975a9dac66af994

    • SHA256

      09e27817ba8f3b75a6cae7e8f66ecfd524058a522923fd90ac0fe7e821935ea7

    • SHA512

      e820c696a90ce86ee2abf78907d11df2ae3d13d0e7e750ca581668f1cabde2d2490bb7ee9d3293b88c5ffe5ee81c580c255041e9f68b28be307cf6a7808183c7

    • SSDEEP

      196608:UaSHFaZRBEYyqmS2DiHPKQgwUgUjvho4wzlF65i6YxE+a6Y:UaSHFaZRBEYyqmS2DiHPKQg3jvZwNVOV

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.