Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

84b4a2b29c...3e.exe

windows7-x64

10

84b4a2b29c...3e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84b4a2b29c3fdd754113d6bcb92c7b3e.exe

  • Size

    107KB

  • Sample

    240106-zhrxqsfegp

  • MD5

    84b4a2b29c3fdd754113d6bcb92c7b3e

  • SHA1

    6c06ddb7cb601e8bd16424a940267bad9efb3b5a

  • SHA256

    e805fe45343d57a16bc0005c029410b6131072d38c0fabe4b373cb17412eb274

  • SHA512

    c6e3c8a04800ed726d512c5e161863c76f4889ad85e6b334b23f7d5ddd803c0f3ce76b1a9db17cb2cd2d9679067aa247438f3a0c1ec8de35c8228e2f532f0383

  • SSDEEP

    1536:tKU4HYPKv3ENHC5BW4SGq674TLYkH2LqaIZTJ+7LhkiB0MPiKeEAgHD/Chx3y:OBUNHCTSGuLYksqaMU7uihJ5233y

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      84b4a2b29c3fdd754113d6bcb92c7b3e.exe

    • Size

      107KB

    • MD5

      84b4a2b29c3fdd754113d6bcb92c7b3e

    • SHA1

      6c06ddb7cb601e8bd16424a940267bad9efb3b5a

    • SHA256

      e805fe45343d57a16bc0005c029410b6131072d38c0fabe4b373cb17412eb274

    • SHA512

      c6e3c8a04800ed726d512c5e161863c76f4889ad85e6b334b23f7d5ddd803c0f3ce76b1a9db17cb2cd2d9679067aa247438f3a0c1ec8de35c8228e2f532f0383

    • SSDEEP

      1536:tKU4HYPKv3ENHC5BW4SGq674TLYkH2LqaIZTJ+7LhkiB0MPiKeEAgHD/Chx3y:OBUNHCTSGuLYksqaMU7uihJ5233y

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks