Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.ccd19ae87fdb8d8b607b0bd9fc3e5e40.exe

  • Size

    77KB

  • Sample

    231118-czyqaaae6z

  • MD5

    ccd19ae87fdb8d8b607b0bd9fc3e5e40

  • SHA1

    7066d26822ee3b435ef33db1795c001fa4f01348

  • SHA256

    fae6f4ec9a6f6ce4a3070a68f2c996db0554fb2394ac3e09885c6ec1141a03aa

  • SHA512

    0de55847db48597e94b804ff47e51fe3db6e0b7f535ebf727a7a1daa9a89059af13c9c6f75d71dd4da38e494c99c4b7de0a95b5db95acd47a635fab87b1210b9

  • SSDEEP

    1536:ewGXeNso/b/Z5kKUI/m2LtQiwfi+TjRC/D:eLU/ZHUi2iwf1TjYD

Malware Config

Targets

    • Target

      NEAS.ccd19ae87fdb8d8b607b0bd9fc3e5e40.exe

    • Size

      77KB

    • MD5

      ccd19ae87fdb8d8b607b0bd9fc3e5e40

    • SHA1

      7066d26822ee3b435ef33db1795c001fa4f01348

    • SHA256

      fae6f4ec9a6f6ce4a3070a68f2c996db0554fb2394ac3e09885c6ec1141a03aa

    • SHA512

      0de55847db48597e94b804ff47e51fe3db6e0b7f535ebf727a7a1daa9a89059af13c9c6f75d71dd4da38e494c99c4b7de0a95b5db95acd47a635fab87b1210b9

    • SSDEEP

      1536:ewGXeNso/b/Z5kKUI/m2LtQiwfi+TjRC/D:eLU/ZHUi2iwf1TjYD

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks