Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

bb181474fa...KI.exe

windows7-x64

10

bb181474fa...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bb181474faf941ff624f6197304d7190_NEIKI

  • Size

    115KB

  • Sample

    240509-bqy41sda36

  • MD5

    bb181474faf941ff624f6197304d7190

  • SHA1

    60548b671f453df4178a959e14cc3933e8694052

  • SHA256

    2848d037c158d951c9f1a9cd99b6464befed7207cf40eade85ee73448b9a4292

  • SHA512

    020ecbafcbb865672f7bdc972fb5cbc55f0c293cb79dff111fbaf7715048ccc62f12e716ab5667f8f54d059d2ece054421a3daf07a5fb86ef9c890a34b90bf5e

  • SSDEEP

    3072:UQ9tsY01mGbGdbrIR/SoQUP5u30KqTKr4:B9aDLGhrIooQUPoDqTKE

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      bb181474faf941ff624f6197304d7190_NEIKI

    • Size

      115KB

    • MD5

      bb181474faf941ff624f6197304d7190

    • SHA1

      60548b671f453df4178a959e14cc3933e8694052

    • SHA256

      2848d037c158d951c9f1a9cd99b6464befed7207cf40eade85ee73448b9a4292

    • SHA512

      020ecbafcbb865672f7bdc972fb5cbc55f0c293cb79dff111fbaf7715048ccc62f12e716ab5667f8f54d059d2ece054421a3daf07a5fb86ef9c890a34b90bf5e

    • SSDEEP

      3072:UQ9tsY01mGbGdbrIR/SoQUP5u30KqTKr4:B9aDLGhrIooQUPoDqTKE

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks