Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    01cd666047d1177e6375d3b0d22c6b71.exe

  • Size

    451KB

  • Sample

    231126-l3vbpsgg3w

  • MD5

    01cd666047d1177e6375d3b0d22c6b71

  • SHA1

    6b25eb02ccc78e4fd3af8e24274c773447945545

  • SHA256

    8da3df09003478247621917b8aee1587fd923f8b75c7480ec3adf4a1042a3270

  • SHA512

    ca54712ddda003bb4021781a3d6066308c4c3b27c2b73d03eff17526fa00ff5019f648852410f5c26c48a0e2f32d26bb499a5c6e7c3150eaa26ece25a5ab3b04

  • SSDEEP

    6144:poJCNDh9CN9Otopg5tTDUZNSN58VU5tTvnVn5tTDUZNSN58VU5tT:KJC4Otoq5t6NSN6G5tbt5t6NSN6G5t

Malware Config

Targets

    • Target

      01cd666047d1177e6375d3b0d22c6b71.exe

    • Size

      451KB

    • MD5

      01cd666047d1177e6375d3b0d22c6b71

    • SHA1

      6b25eb02ccc78e4fd3af8e24274c773447945545

    • SHA256

      8da3df09003478247621917b8aee1587fd923f8b75c7480ec3adf4a1042a3270

    • SHA512

      ca54712ddda003bb4021781a3d6066308c4c3b27c2b73d03eff17526fa00ff5019f648852410f5c26c48a0e2f32d26bb499a5c6e7c3150eaa26ece25a5ab3b04

    • SSDEEP

      6144:poJCNDh9CN9Otopg5tTDUZNSN58VU5tTvnVn5tTDUZNSN58VU5tT:KJC4Otoq5t6NSN6G5tbt5t6NSN6G5t

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks