Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.35ca9...50.exe

windows7-x64

10

NEAS.35ca9...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.35ca961ac26220d21fdd627a75230f50.exe

  • Size

    82KB

  • Sample

    231118-dyefpaab56

  • MD5

    35ca961ac26220d21fdd627a75230f50

  • SHA1

    dd71f191ef93989e413d9a0599fdd7abd2b23f3a

  • SHA256

    ab7b9386d45ae071955e0c9077f9b67c839c24478d945d741f45a300f31d1f7b

  • SHA512

    536d6fb637da47ec5a66d5b04a5c38b9e5834593beb7361f19d5e32f77a8e2f9d2080a231b8d48e6084242dc322474f0e96aa948ee8af757ab6272d938fe5699

  • SSDEEP

    1536:wPZWdlCHehfhtx38eERUMVgRGz/Ffcq2L7opm6+wDSmQFN6TiN1sJtvQu:wPZAlC+hfhv38eE+MVg+Bc3spm6tm7NU

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.35ca961ac26220d21fdd627a75230f50.exe

    • Size

      82KB

    • MD5

      35ca961ac26220d21fdd627a75230f50

    • SHA1

      dd71f191ef93989e413d9a0599fdd7abd2b23f3a

    • SHA256

      ab7b9386d45ae071955e0c9077f9b67c839c24478d945d741f45a300f31d1f7b

    • SHA512

      536d6fb637da47ec5a66d5b04a5c38b9e5834593beb7361f19d5e32f77a8e2f9d2080a231b8d48e6084242dc322474f0e96aa948ee8af757ab6272d938fe5699

    • SSDEEP

      1536:wPZWdlCHehfhtx38eERUMVgRGz/Ffcq2L7opm6+wDSmQFN6TiN1sJtvQu:wPZAlC+hfhv38eE+MVg+Bc3spm6tm7NU

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks