Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

19decd64e2...cs.exe

windows7-x64

10

19decd64e2...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    19decd64e2569e9a47e1b33818f52750_NeikiAnalytics.exe

  • Size

    125KB

  • Sample

    240604-a988nafd9z

  • MD5

    19decd64e2569e9a47e1b33818f52750

  • SHA1

    6359d3e36417f69e10e49b8b04b470b93306a49d

  • SHA256

    c541db0e1ebae0e9c05f1c8eb0c3bd1d78759f88f3a9dcccd3c6ef4c0c48f5cc

  • SHA512

    8807930502a06ba7665e417f3fc2a085f410c60a6fc76d118f6dfd8a565d65abd05619d635e722d6ccb3328c49700865b6b0dd40bba66b1eee97bb4996d4d6ca

  • SSDEEP

    3072:Kj9VJt/bGAsKywP5R6lv8cO1WdTCn93OGey/ZhJakrPF:8VY4R/clTCndOGeKTaG

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      19decd64e2569e9a47e1b33818f52750_NeikiAnalytics.exe

    • Size

      125KB

    • MD5

      19decd64e2569e9a47e1b33818f52750

    • SHA1

      6359d3e36417f69e10e49b8b04b470b93306a49d

    • SHA256

      c541db0e1ebae0e9c05f1c8eb0c3bd1d78759f88f3a9dcccd3c6ef4c0c48f5cc

    • SHA512

      8807930502a06ba7665e417f3fc2a085f410c60a6fc76d118f6dfd8a565d65abd05619d635e722d6ccb3328c49700865b6b0dd40bba66b1eee97bb4996d4d6ca

    • SSDEEP

      3072:Kj9VJt/bGAsKywP5R6lv8cO1WdTCn93OGey/ZhJakrPF:8VY4R/clTCndOGeKTaG

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks