Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    58b65b9147dd78c5b5a131ece6a48ba0.exe

  • Size

    276KB

  • Sample

    231126-ls29kage62

  • MD5

    58b65b9147dd78c5b5a131ece6a48ba0

  • SHA1

    d12f4791cedf6d5f2998d33619224eb56c6a1799

  • SHA256

    d5b0967986c6abd5346df072707008c0c6f82b35cc12accd5eb9cb88e16456d6

  • SHA512

    b91cbfb08404057bddaf7ebf47a89e0390e00df83eb20afe47cf6e8adc8873ba7fa94b291fc38777122f73d5f22f861286739a8a75cf2d80d61805a69cad244a

  • SSDEEP

    6144:gs0zUBORLSdn7MUZst5qXsunbLwMddjPXmF6EC1LlzxAKN+xTU5AX/KXWZCKl/j:gs0JR+pMUQunbpd/mF6ECJlzxAKN2X/Z

Malware Config

Targets

    • Target

      58b65b9147dd78c5b5a131ece6a48ba0.exe

    • Size

      276KB

    • MD5

      58b65b9147dd78c5b5a131ece6a48ba0

    • SHA1

      d12f4791cedf6d5f2998d33619224eb56c6a1799

    • SHA256

      d5b0967986c6abd5346df072707008c0c6f82b35cc12accd5eb9cb88e16456d6

    • SHA512

      b91cbfb08404057bddaf7ebf47a89e0390e00df83eb20afe47cf6e8adc8873ba7fa94b291fc38777122f73d5f22f861286739a8a75cf2d80d61805a69cad244a

    • SSDEEP

      6144:gs0zUBORLSdn7MUZst5qXsunbLwMddjPXmF6EC1LlzxAKN+xTU5AX/KXWZCKl/j:gs0JR+pMUQunbpd/mF6ECJlzxAKN2X/Z

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks