Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2f7b4c3e4c...cs.exe

windows7-x64

10

2f7b4c3e4c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2f7b4c3e4c1ee555ca453bdc532b4b60_NeikiAnalytics

  • Size

    177KB

  • Sample

    240514-1nz1zaae29

  • MD5

    2f7b4c3e4c1ee555ca453bdc532b4b60

  • SHA1

    c6ca04523c68309033af4cdc6b6ea923b06e4270

  • SHA256

    b1b3b847e86678c6acc44dfa87e458d573b1c71e896f4767c4a151018b14436d

  • SHA512

    7eb9d0cc3478ee9dd6796c9dab6aa41dbaa0bb2f501ab2c193a62c21b4d69b3124eb79c4bb8e578943ab522deacb7020aa64d282255a49fa65a283291294de9c

  • SSDEEP

    3072:vdqcbd3LgIQx6WlNv6n3g3q/haR5sS+vfvLHhjh8g1eGFyOsa:lqcZLgNwWlNSn3ga/harSvLHh98gwG06

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      2f7b4c3e4c1ee555ca453bdc532b4b60_NeikiAnalytics

    • Size

      177KB

    • MD5

      2f7b4c3e4c1ee555ca453bdc532b4b60

    • SHA1

      c6ca04523c68309033af4cdc6b6ea923b06e4270

    • SHA256

      b1b3b847e86678c6acc44dfa87e458d573b1c71e896f4767c4a151018b14436d

    • SHA512

      7eb9d0cc3478ee9dd6796c9dab6aa41dbaa0bb2f501ab2c193a62c21b4d69b3124eb79c4bb8e578943ab522deacb7020aa64d282255a49fa65a283291294de9c

    • SSDEEP

      3072:vdqcbd3LgIQx6WlNv6n3g3q/haR5sS+vfvLHhjh8g1eGFyOsa:lqcZLgNwWlNSn3ga/harSvLHh98gwG06

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks