Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.0860c3278fa13e6dbbaafdb34fb63650.exe

  • Size

    96KB

  • Sample

    231118-f38w7scf6z

  • MD5

    0860c3278fa13e6dbbaafdb34fb63650

  • SHA1

    7750c3c694f0734cac592a74751361197e06daf8

  • SHA256

    08f2f17b0528a1e93b1ccd51320cec7a5400a7fc854beb1f9c72545b1ae6f574

  • SHA512

    2d1d88c4f87030e1dce0f2057cb72f5648e206ce03fee1bea67972165262b83ddc0f87026bb38428014e017e4ddfd3ad9031e772b5a3f585ae54bc61b4caff82

  • SSDEEP

    1536:+E4k52g409tv5gaEsqtmwNM73cv0S2nriDcm/WnufuEeTVHzg5ZMAPgnDNBrcN4v:+Ex2gJDR+tH2nuIm/PfiiMAPgxed6BYY

Malware Config

Targets

    • Target

      NEAS.0860c3278fa13e6dbbaafdb34fb63650.exe

    • Size

      96KB

    • MD5

      0860c3278fa13e6dbbaafdb34fb63650

    • SHA1

      7750c3c694f0734cac592a74751361197e06daf8

    • SHA256

      08f2f17b0528a1e93b1ccd51320cec7a5400a7fc854beb1f9c72545b1ae6f574

    • SHA512

      2d1d88c4f87030e1dce0f2057cb72f5648e206ce03fee1bea67972165262b83ddc0f87026bb38428014e017e4ddfd3ad9031e772b5a3f585ae54bc61b4caff82

    • SSDEEP

      1536:+E4k52g409tv5gaEsqtmwNM73cv0S2nriDcm/WnufuEeTVHzg5ZMAPgnDNBrcN4v:+Ex2gJDR+tH2nuIm/PfiiMAPgxed6BYY

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks