Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a2036ebeb7a0050485df7a94604428f0.exe

  • Size

    107KB

  • Sample

    231230-xh2qtsdfh7

  • MD5

    a2036ebeb7a0050485df7a94604428f0

  • SHA1

    c3a8e5f8f0664a5c8e5a2db424e7fc50a64133b3

  • SHA256

    7286ec92e48e07d5145f81046e467c5278139afb66b9e30a5242e4fa73af9b49

  • SHA512

    5674c3fac48f42d125e2528826282d9ad2d3372544a740a8e189d577366cba7534b5e47e9257042ba15a6477c1018c3f95f1f0f440c4253a0cfbb638e20f8fdf

  • SSDEEP

    1536:8gtxCYHkqtdAyd83mH+8wjfOB4VWul2LkaIZTJ+7LhkiB0MPiKeEAgHD/Chx3y:KYEu6Y7+80OB4WuWkaMU7uihJ5233y

Malware Config

Targets

    • Target

      a2036ebeb7a0050485df7a94604428f0.exe

    • Size

      107KB

    • MD5

      a2036ebeb7a0050485df7a94604428f0

    • SHA1

      c3a8e5f8f0664a5c8e5a2db424e7fc50a64133b3

    • SHA256

      7286ec92e48e07d5145f81046e467c5278139afb66b9e30a5242e4fa73af9b49

    • SHA512

      5674c3fac48f42d125e2528826282d9ad2d3372544a740a8e189d577366cba7534b5e47e9257042ba15a6477c1018c3f95f1f0f440c4253a0cfbb638e20f8fdf

    • SSDEEP

      1536:8gtxCYHkqtdAyd83mH+8wjfOB4VWul2LkaIZTJ+7LhkiB0MPiKeEAgHD/Chx3y:KYEu6Y7+80OB4WuWkaMU7uihJ5233y

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks