Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

32faca6299...AS.exe

windows7-x64

10

32faca6299...AS.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32faca6299b5b88587b3b80317921740_NEAS

  • Size

    113KB

  • Sample

    240507-lzszgadh94

  • MD5

    32faca6299b5b88587b3b80317921740

  • SHA1

    6a502498b3e4736e221f03365b396104331ff09c

  • SHA256

    f07ae98e71657358f7b7b5e97825bc3da762e9024558011ad7611314008e4c85

  • SHA512

    f3700d2b0e5eaee0d35c8403061dc69085c63c3d0a620209bff7291272ba453b5494627eba49c6ba189664424f5c09a97b5877ce2032afe466a23ff18cfcfecf

  • SSDEEP

    3072:KX/LHAwG2Dn28+cvCOuGkZFfFSebHWrH8wTW0:Kz5XJ1vX7otSeWrP

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      32faca6299b5b88587b3b80317921740_NEAS

    • Size

      113KB

    • MD5

      32faca6299b5b88587b3b80317921740

    • SHA1

      6a502498b3e4736e221f03365b396104331ff09c

    • SHA256

      f07ae98e71657358f7b7b5e97825bc3da762e9024558011ad7611314008e4c85

    • SHA512

      f3700d2b0e5eaee0d35c8403061dc69085c63c3d0a620209bff7291272ba453b5494627eba49c6ba189664424f5c09a97b5877ce2032afe466a23ff18cfcfecf

    • SSDEEP

      3072:KX/LHAwG2Dn28+cvCOuGkZFfFSebHWrH8wTW0:Kz5XJ1vX7otSeWrP

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks