Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

3f21511f7e...cs.exe

windows7-x64

10

3f21511f7e...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f21511f7e61e408bf4063a2c40cba00_NeikiAnalytics.exe

  • Size

    1.2MB

  • Sample

    240601-qw1bladf5t

  • MD5

    3f21511f7e61e408bf4063a2c40cba00

  • SHA1

    723d7a0ff11b2402b15c6888cc392aaca8aa6f58

  • SHA256

    7adbf319519bbbd572e9c9ccda5f8dbd6e6ce599b9995a15cefa82d830d964e5

  • SHA512

    fdfd7cb8b840b2ff1fab8656b2c4e97429fd466267b7883f6893a4fee2761c54ae7074aee53c79a5a569b9969a089c1bf660830937b3221c79b781d55323da3c

  • SSDEEP

    12288:dKhVzDCXwpnsKvNA+XTvZHWuEo3oWbvrec:chVTpsKv2EvZHp3oWbvrec

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      3f21511f7e61e408bf4063a2c40cba00_NeikiAnalytics.exe

    • Size

      1.2MB

    • MD5

      3f21511f7e61e408bf4063a2c40cba00

    • SHA1

      723d7a0ff11b2402b15c6888cc392aaca8aa6f58

    • SHA256

      7adbf319519bbbd572e9c9ccda5f8dbd6e6ce599b9995a15cefa82d830d964e5

    • SHA512

      fdfd7cb8b840b2ff1fab8656b2c4e97429fd466267b7883f6893a4fee2761c54ae7074aee53c79a5a569b9969a089c1bf660830937b3221c79b781d55323da3c

    • SSDEEP

      12288:dKhVzDCXwpnsKvNA+XTvZHWuEo3oWbvrec:chVTpsKv2EvZHp3oWbvrec

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks