Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

e3e7c3c23f...20.exe

windows7-x64

10

e3e7c3c23f...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e3e7c3c23f7aa1d7c897cace6d60ab20.exe

  • Size

    276KB

  • Sample

    231126-ydc3caca6v

  • MD5

    e3e7c3c23f7aa1d7c897cace6d60ab20

  • SHA1

    1524c261d5123284f0da1e25243b84e8d7bee15d

  • SHA256

    fbcbc751137339c760a2c8f85fc40414c72ef1aa0cf52d8d49b16d23b5da2345

  • SHA512

    6a123a997f9459bd85893af7bf44e3e48f4c36f43eb33e975f1cd58c38086c0d701cb79901eb0b7d8a5e74faa8e82d4eaff8f048c80e4e112bf15eff07a7b6fe

  • SSDEEP

    6144:xA5cpq1Tp2PehdWZHEFJ7aWN1rtMsQBOSGaF+:GF1l2E2HEGWN1RMs1S7

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      e3e7c3c23f7aa1d7c897cace6d60ab20.exe

    • Size

      276KB

    • MD5

      e3e7c3c23f7aa1d7c897cace6d60ab20

    • SHA1

      1524c261d5123284f0da1e25243b84e8d7bee15d

    • SHA256

      fbcbc751137339c760a2c8f85fc40414c72ef1aa0cf52d8d49b16d23b5da2345

    • SHA512

      6a123a997f9459bd85893af7bf44e3e48f4c36f43eb33e975f1cd58c38086c0d701cb79901eb0b7d8a5e74faa8e82d4eaff8f048c80e4e112bf15eff07a7b6fe

    • SSDEEP

      6144:xA5cpq1Tp2PehdWZHEFJ7aWN1rtMsQBOSGaF+:GF1l2E2HEGWN1RMs1S7

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks