Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e8f1a290a6f92c80eed0feedc6946180_NEAS

  • Size

    844KB

  • Sample

    240507-vsb7taac27

  • MD5

    e8f1a290a6f92c80eed0feedc6946180

  • SHA1

    2ce79e7d02e1717e2786a2fdf48802d113fc0143

  • SHA256

    653da7dc2e4318279f3e188c80191d7904f3b67ee166d1f179311eb7af8298aa

  • SHA512

    a3f833bd2887c2b25431a5f83febd9cfd1b0bd84775a8092aeb32bd93afd794f0931cbeafa406eae10ce6b124a1047270a5a7760e65bcb0dd088f61a3708ca87

  • SSDEEP

    24576:kDH5W3TnbQihMpQnqrdX72LbY6x46uR/qYglMi:kDH5W3TbQihw+cdX2x46uhqllMi

Malware Config

Targets

    • Target

      e8f1a290a6f92c80eed0feedc6946180_NEAS

    • Size

      844KB

    • MD5

      e8f1a290a6f92c80eed0feedc6946180

    • SHA1

      2ce79e7d02e1717e2786a2fdf48802d113fc0143

    • SHA256

      653da7dc2e4318279f3e188c80191d7904f3b67ee166d1f179311eb7af8298aa

    • SHA512

      a3f833bd2887c2b25431a5f83febd9cfd1b0bd84775a8092aeb32bd93afd794f0931cbeafa406eae10ce6b124a1047270a5a7760e65bcb0dd088f61a3708ca87

    • SSDEEP

      24576:kDH5W3TnbQihMpQnqrdX72LbY6x46uR/qYglMi:kDH5W3TbQihw+cdX2x46uhqllMi

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks