Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

907b3b677b...cs.exe

windows7-x64

10

907b3b677b...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    907b3b677b8bff6d483e2f8b2a6c07c0_NeikiAnalytics

  • Size

    89KB

  • Sample

    240511-gyrmsshg71

  • MD5

    907b3b677b8bff6d483e2f8b2a6c07c0

  • SHA1

    ff891ff22f1b4221c741dc3ce6d5981f0674216c

  • SHA256

    bf2d31dd6a306b62ded7aac32a771279c3d211c0caac5a9657bbb9ad5c80211c

  • SHA512

    f3c0c75092467968f35dff49b2bef4eeac9ceb3eeaae0a7b106b7971b047d01db44512efa0c73a07ca89fac48d46175fd7f6c4637253ca4df1b4362c4188ec2d

  • SSDEEP

    1536:hotb6uZGNwZ261IY1qXLdoTXw5gj/9eXD1u2/1FdRQvED68a+VMKKTRVGFtUhQf1:mp6w04/1INL+TXw5G9C1u2ndev1r4MKr

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      907b3b677b8bff6d483e2f8b2a6c07c0_NeikiAnalytics

    • Size

      89KB

    • MD5

      907b3b677b8bff6d483e2f8b2a6c07c0

    • SHA1

      ff891ff22f1b4221c741dc3ce6d5981f0674216c

    • SHA256

      bf2d31dd6a306b62ded7aac32a771279c3d211c0caac5a9657bbb9ad5c80211c

    • SHA512

      f3c0c75092467968f35dff49b2bef4eeac9ceb3eeaae0a7b106b7971b047d01db44512efa0c73a07ca89fac48d46175fd7f6c4637253ca4df1b4362c4188ec2d

    • SSDEEP

      1536:hotb6uZGNwZ261IY1qXLdoTXw5gj/9eXD1u2/1FdRQvED68a+VMKKTRVGFtUhQf1:mp6w04/1INL+TXw5G9C1u2ndev1r4MKr

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks