Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

137bfa54b1...KI.exe

windows7-x64

10

137bfa54b1...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    137bfa54b104ff2fe224bc608433c850_NEIKI

  • Size

    176KB

  • Sample

    240507-ydyztaeh26

  • MD5

    137bfa54b104ff2fe224bc608433c850

  • SHA1

    9a16a22767f1f35f442db80c4df1db04adfde72c

  • SHA256

    905462673256d0232f6855b843f81b19f63cf0f83d28d8e3043115aeb20febe5

  • SHA512

    602f1edd100d4cff6999b65ac032c368d60e8324e1b49d8c81c35297343d7a05a4fa1dfc2576dbadf910afd5a9b15526426aa7dfe3873c1a6057173e9a3982cf

  • SSDEEP

    3072:w3gwtrT36ripvRO1cjENRZ9wmAOIayGsOOJF4EISi/i4gG4npAjmA39QQIckJI:w39rb6ripvRO1nTZ9EaUn4yjK99QQd

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      137bfa54b104ff2fe224bc608433c850_NEIKI

    • Size

      176KB

    • MD5

      137bfa54b104ff2fe224bc608433c850

    • SHA1

      9a16a22767f1f35f442db80c4df1db04adfde72c

    • SHA256

      905462673256d0232f6855b843f81b19f63cf0f83d28d8e3043115aeb20febe5

    • SHA512

      602f1edd100d4cff6999b65ac032c368d60e8324e1b49d8c81c35297343d7a05a4fa1dfc2576dbadf910afd5a9b15526426aa7dfe3873c1a6057173e9a3982cf

    • SSDEEP

      3072:w3gwtrT36ripvRO1cjENRZ9wmAOIayGsOOJF4EISi/i4gG4npAjmA39QQIckJI:w39rb6ripvRO1nTZ9EaUn4yjK99QQd

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks