Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

1877fc399a...cs.exe

windows7-x64

10

1877fc399a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1877fc399a0254ad8c00270f3da7cda0_NeikiAnalytics

  • Size

    456KB

  • Sample

    240514-yjj3vadc21

  • MD5

    1877fc399a0254ad8c00270f3da7cda0

  • SHA1

    a6ff239fcf564e951a8b762a6262925e9fa10b91

  • SHA256

    ef10983dd8876962414d1ef2116bf1122168f3e77f29073e5a8ec006f4a0d158

  • SHA512

    57b4b04e7645433b57fbcaea7b31819ded5e97a8e55664644d56eee904a6128a3f782caf02a786f556eef15be981dcb6e5941f41eeb654de207322ed8d5566ac

  • SSDEEP

    12288:zmKwIKfDy/phgeczlqczZd7LFB3oFHoGnFjVZnykJGvpHGdm:JwFfDy/phgeczlqczZd7LFB3oFHoGnFg

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      1877fc399a0254ad8c00270f3da7cda0_NeikiAnalytics

    • Size

      456KB

    • MD5

      1877fc399a0254ad8c00270f3da7cda0

    • SHA1

      a6ff239fcf564e951a8b762a6262925e9fa10b91

    • SHA256

      ef10983dd8876962414d1ef2116bf1122168f3e77f29073e5a8ec006f4a0d158

    • SHA512

      57b4b04e7645433b57fbcaea7b31819ded5e97a8e55664644d56eee904a6128a3f782caf02a786f556eef15be981dcb6e5941f41eeb654de207322ed8d5566ac

    • SSDEEP

      12288:zmKwIKfDy/phgeczlqczZd7LFB3oFHoGnFjVZnykJGvpHGdm:JwFfDy/phgeczlqczZd7LFB3oFHoGnFg

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks