Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

19ec446f59...cs.exe

windows7-x64

10

19ec446f59...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    19ec446f593973bbaabfc5fe60336810_NeikiAnalytics.exe

  • Size

    565KB

  • Sample

    240525-dnr9sscf57

  • MD5

    19ec446f593973bbaabfc5fe60336810

  • SHA1

    8e943ff37fdfeadab2cf487dee85ec0ff81a7131

  • SHA256

    c31128ed3845495b13b97918ce5f2982e20968fb53dcc7b839f964664708eafe

  • SHA512

    d7c32545685b9182be7b658d387dfd36f29eabe2cd71a8089c3b0d6c3a14ddf5b8e65bb2a7538d6c968100a217f8ad68a5b829f92c1a4943c8f47afd5af20ab3

  • SSDEEP

    12288:jjKHtuFjAh//+zrWAIAqWim/+zrWAI5KF8OX:jjatuFjAh/mvFimm09OX

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      19ec446f593973bbaabfc5fe60336810_NeikiAnalytics.exe

    • Size

      565KB

    • MD5

      19ec446f593973bbaabfc5fe60336810

    • SHA1

      8e943ff37fdfeadab2cf487dee85ec0ff81a7131

    • SHA256

      c31128ed3845495b13b97918ce5f2982e20968fb53dcc7b839f964664708eafe

    • SHA512

      d7c32545685b9182be7b658d387dfd36f29eabe2cd71a8089c3b0d6c3a14ddf5b8e65bb2a7538d6c968100a217f8ad68a5b829f92c1a4943c8f47afd5af20ab3

    • SSDEEP

      12288:jjKHtuFjAh//+zrWAIAqWim/+zrWAI5KF8OX:jjatuFjAh/mvFimm09OX

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks