Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    07344106418c4cc09106c747b692bca0_NEIKI

  • Size

    1.3MB

  • Sample

    240508-wds3fsfg71

  • MD5

    07344106418c4cc09106c747b692bca0

  • SHA1

    d4eb9c20384e09e0512df5cb9e338bd43d09a9ae

  • SHA256

    cc9552b6b021b67dd3b54bc30e36d0213277b68d0790319abb5c8edeed28e407

  • SHA512

    7f33e634a55e445c1d1495f56b3a63e0ec3e804711dfdcabb9d8b79cecb94b9c6381746e0a2c3aff93645e09539af4fad8a33f3f3e2dd91f13d6382204381495

  • SSDEEP

    24576:5MFHvr4B9f01ZmQvrb91v92W9C05wkEPSOdKkrzEoxrC9toC9Dq9onk8:yFHkB9f0VP91v92W805IPSOdKgzEoxrS

Malware Config

Targets

    • Target

      07344106418c4cc09106c747b692bca0_NEIKI

    • Size

      1.3MB

    • MD5

      07344106418c4cc09106c747b692bca0

    • SHA1

      d4eb9c20384e09e0512df5cb9e338bd43d09a9ae

    • SHA256

      cc9552b6b021b67dd3b54bc30e36d0213277b68d0790319abb5c8edeed28e407

    • SHA512

      7f33e634a55e445c1d1495f56b3a63e0ec3e804711dfdcabb9d8b79cecb94b9c6381746e0a2c3aff93645e09539af4fad8a33f3f3e2dd91f13d6382204381495

    • SSDEEP

      24576:5MFHvr4B9f01ZmQvrb91v92W9C05wkEPSOdKkrzEoxrC9toC9Dq9onk8:yFHkB9f0VP91v92W805IPSOdKgzEoxrS

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks