Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e87945421f3cb9c6d221fd9110e7ae25.exe

  • Size

    121KB

  • Sample

    240429-myv8wahc4y

  • MD5

    e87945421f3cb9c6d221fd9110e7ae25

  • SHA1

    98adae9e887445e1a3b7ff7358ea360a91cb9ea6

  • SHA256

    288016f7ee422311f7572b11882c3544b47be70c42f14e68937770c2919e00ff

  • SHA512

    098e7bf3cb623ec5ff31594805c9c39e0b90c96d90706d53281bd93dbca850b5e45ce7cc2ae9985ca1d0dd06850d08128d35df0104786a62e3e9db9417ddd1f7

  • SSDEEP

    3072:k799alMV0Frm8FfDHge/8bFC6145+2NkHIO7AJnD5tvv:fZF1FfDHbUCI45+2NkHIOarvv

Malware Config

Targets

    • Target

      e87945421f3cb9c6d221fd9110e7ae25.exe

    • Size

      121KB

    • MD5

      e87945421f3cb9c6d221fd9110e7ae25

    • SHA1

      98adae9e887445e1a3b7ff7358ea360a91cb9ea6

    • SHA256

      288016f7ee422311f7572b11882c3544b47be70c42f14e68937770c2919e00ff

    • SHA512

      098e7bf3cb623ec5ff31594805c9c39e0b90c96d90706d53281bd93dbca850b5e45ce7cc2ae9985ca1d0dd06850d08128d35df0104786a62e3e9db9417ddd1f7

    • SSDEEP

      3072:k799alMV0Frm8FfDHge/8bFC6145+2NkHIO7AJnD5tvv:fZF1FfDHbUCI45+2NkHIOarvv

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks