Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

24fd54db7b...KI.exe

windows7-x64

10

24fd54db7b...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    24fd54db7bc727d0e43d18e328edd670_NEIKI

  • Size

    1.9MB

  • Sample

    240508-ycqbaaed32

  • MD5

    24fd54db7bc727d0e43d18e328edd670

  • SHA1

    6ef6b8438c7d5b42437702f720f22a112f76ec4f

  • SHA256

    8d7f6b53e831b0260030049e8e040854beca571bc99ef4f5c3b3c48fc8c3cb20

  • SHA512

    43027e5f205b80605c345114d0d585f7a168cf6bf27e5422ca28b9eb2e345b20bf2133b4d6375a0947cf9e59e67bb87c592691b92b9b9f6a5af81de2250abc17

  • SSDEEP

    49152:CaSHFaZRBEYyqmS2DiHPKQgmZUnaUgpC7jvha51N:CaSHFaZRBEYyqmS2DiHPKQgmZ0aUgUjY

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      24fd54db7bc727d0e43d18e328edd670_NEIKI

    • Size

      1.9MB

    • MD5

      24fd54db7bc727d0e43d18e328edd670

    • SHA1

      6ef6b8438c7d5b42437702f720f22a112f76ec4f

    • SHA256

      8d7f6b53e831b0260030049e8e040854beca571bc99ef4f5c3b3c48fc8c3cb20

    • SHA512

      43027e5f205b80605c345114d0d585f7a168cf6bf27e5422ca28b9eb2e345b20bf2133b4d6375a0947cf9e59e67bb87c592691b92b9b9f6a5af81de2250abc17

    • SSDEEP

      49152:CaSHFaZRBEYyqmS2DiHPKQgmZUnaUgpC7jvha51N:CaSHFaZRBEYyqmS2DiHPKQgmZ0aUgUjY

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks