Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

e2095e85a9...8c.exe

windows7-x64

10

e2095e85a9...8c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2095e85a992ae5b29ddd8ee6e8a3e8c.exe

  • Size

    107KB

  • Sample

    240110-wdkq3sdah2

  • MD5

    e2095e85a992ae5b29ddd8ee6e8a3e8c

  • SHA1

    f2f18ae23c3f6abd5033acf5291d99f9971b07de

  • SHA256

    e4507d1269e99b7c2430087a7ede90cb6658f7b738e6dab1746d3ea89ffc2fff

  • SHA512

    070b51a8b47ab789b0dc56045b606d64fe0d300b61328463439b11973a4ac8f0b4f3f0933b5cea633d573455a27124fb6c54f46b0c903fe5c2d20aa5b1940a6d

  • SSDEEP

    1536:BO9TT7QlrPLfr0+71T6Djr2LYaIZTJ+7LhkiB0MPiKeEAgHD/Chx3y:ozQRPUWyjIYaMU7uihJ5233y

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      e2095e85a992ae5b29ddd8ee6e8a3e8c.exe

    • Size

      107KB

    • MD5

      e2095e85a992ae5b29ddd8ee6e8a3e8c

    • SHA1

      f2f18ae23c3f6abd5033acf5291d99f9971b07de

    • SHA256

      e4507d1269e99b7c2430087a7ede90cb6658f7b738e6dab1746d3ea89ffc2fff

    • SHA512

      070b51a8b47ab789b0dc56045b606d64fe0d300b61328463439b11973a4ac8f0b4f3f0933b5cea633d573455a27124fb6c54f46b0c903fe5c2d20aa5b1940a6d

    • SSDEEP

      1536:BO9TT7QlrPLfr0+71T6Djr2LYaIZTJ+7LhkiB0MPiKeEAgHD/Chx3y:ozQRPUWyjIYaMU7uihJ5233y

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks