Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

df744bdba6...cd.exe

windows7-x64

10

df744bdba6...cd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df744bdba6d64856abcd072c1f81b33ebd7064c56ec039956fc3625b3be68fcd

  • Size

    96KB

  • Sample

    241208-ed42aawnal

  • MD5

    8d8f3d47faffd642e9972d9af856d7d2

  • SHA1

    61ef8f84dfb5a51c9c74b63aa8427d4ded976a16

  • SHA256

    df744bdba6d64856abcd072c1f81b33ebd7064c56ec039956fc3625b3be68fcd

  • SHA512

    0d447433be529ca9f30b2678ac4336162b5aa7e2dc4e92d375cabb36b21f9e5e72fb453d1e5bb98c84feeecee7daf02f8becd7a94fc8fc04d3eaefb93d97835b

  • SSDEEP

    1536:Noq0qV4Eis45f2PiFDFnTaPL0ZiPjQd3yRQ+VR5R45WtqV9R2R462izMg3R7ih9:NCquEis45f2StaXjQke+VHrtG9MW3+3W

Score
10/10
berbewbackdoordiscoverypersistence

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Targets

    • Target

      df744bdba6d64856abcd072c1f81b33ebd7064c56ec039956fc3625b3be68fcd

    • Size

      96KB

    • MD5

      8d8f3d47faffd642e9972d9af856d7d2

    • SHA1

      61ef8f84dfb5a51c9c74b63aa8427d4ded976a16

    • SHA256

      df744bdba6d64856abcd072c1f81b33ebd7064c56ec039956fc3625b3be68fcd

    • SHA512

      0d447433be529ca9f30b2678ac4336162b5aa7e2dc4e92d375cabb36b21f9e5e72fb453d1e5bb98c84feeecee7daf02f8becd7a94fc8fc04d3eaefb93d97835b

    • SSDEEP

      1536:Noq0qV4Eis45f2PiFDFnTaPL0ZiPjQd3yRQ+VR5R45WtqV9R2R462izMg3R7ih9:NCquEis45f2StaXjQke+VHrtG9MW3+3W

    Score
    10/10
    berbewbackdoordiscoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Berbew

      Berbew is a backdoor written in C++.

      backdoorberbew

    • Berbew family

      berbew

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks