Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    414d4cf562af0c9eaca881230ccdb370_NeikiAnalytics

  • Size

    199KB

  • Sample

    240512-xex88sdh38

  • MD5

    414d4cf562af0c9eaca881230ccdb370

  • SHA1

    4ce444f4a2adcbddd5d866091875bca5804c164b

  • SHA256

    f9b1401504ad4ad03638674eba71f8a1ff969ba8fbea6eda845c943c5102baf8

  • SHA512

    7c81be802e59b36fefe51558b25c6d9a2538c8b98aaa140991acc36e4df57bf495bfa487364f4d20850dec9f58bd3497794fb6daa4ebdf1cfb9ee597bee8b590

  • SSDEEP

    6144:3jXH4JJc9AySZSCZj81+jq4peBK034YOmFz1h:37im9IZSCG1+jheBbOmFxh

Malware Config

Targets

    • Target

      414d4cf562af0c9eaca881230ccdb370_NeikiAnalytics

    • Size

      199KB

    • MD5

      414d4cf562af0c9eaca881230ccdb370

    • SHA1

      4ce444f4a2adcbddd5d866091875bca5804c164b

    • SHA256

      f9b1401504ad4ad03638674eba71f8a1ff969ba8fbea6eda845c943c5102baf8

    • SHA512

      7c81be802e59b36fefe51558b25c6d9a2538c8b98aaa140991acc36e4df57bf495bfa487364f4d20850dec9f58bd3497794fb6daa4ebdf1cfb9ee597bee8b590

    • SSDEEP

      6144:3jXH4JJc9AySZSCZj81+jq4peBK034YOmFz1h:37im9IZSCG1+jheBbOmFxh

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks