Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    fdf2a5946a624f7ca114accec788705e.exe

  • Size

    176KB

  • Sample

    240106-zfnsashab3

  • MD5

    fdf2a5946a624f7ca114accec788705e

  • SHA1

    811a9fc51e63461efd7f78609d74328f0ae21d02

  • SHA256

    c0b10cadbdb0b5773dcee574c58e1cbff74f9fe5637a82525401b43f101d2965

  • SHA512

    6bf935e0c98e60285e5319063ac7fed67bc2febc852a42727cf96cd9741e41aded51187e7254961c91b5ba4d24f8f2b2dccf9240fbf9035c72b2d66727c1346f

  • SSDEEP

    3072:1kmi+jpbS/1Vi8SUjmOiBn3w8BdTj2h33ppaS46HUF2pMXSfN6RnQShl:1Ri+VbyVFXjVu3w8BdTj2V3ppQ60MMCQ

Malware Config

Targets

    • Target

      fdf2a5946a624f7ca114accec788705e.exe

    • Size

      176KB

    • MD5

      fdf2a5946a624f7ca114accec788705e

    • SHA1

      811a9fc51e63461efd7f78609d74328f0ae21d02

    • SHA256

      c0b10cadbdb0b5773dcee574c58e1cbff74f9fe5637a82525401b43f101d2965

    • SHA512

      6bf935e0c98e60285e5319063ac7fed67bc2febc852a42727cf96cd9741e41aded51187e7254961c91b5ba4d24f8f2b2dccf9240fbf9035c72b2d66727c1346f

    • SSDEEP

      3072:1kmi+jpbS/1Vi8SUjmOiBn3w8BdTj2h33ppaS46HUF2pMXSfN6RnQShl:1Ri+VbyVFXjVu3w8BdTj2V3ppQ60MMCQ

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks