Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

b04644e688...bf.exe

windows7-x64

10

b04644e688...bf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b04644e68817134102109f8d11c36b45af2f5b0b72749bbfa79bfc97b21fbfbf

  • Size

    87KB

  • Sample

    250120-la8nmasldx

  • MD5

    937439b5f00c7f0bbb2bc113e432eff1

  • SHA1

    cd44f7802f99d92fedf3cc348256926eeccb0011

  • SHA256

    b04644e68817134102109f8d11c36b45af2f5b0b72749bbfa79bfc97b21fbfbf

  • SHA512

    cd7baf01225b8894256611acc917bb5dc378a219d0b9a1f115ed01eb0d1c5d7d7b9d455faa6b83ee224c65d908833e683ab76dc5596e5169bbf7ae943fcd8eb8

  • SSDEEP

    1536:cfIccRM2ZTpuKg0CNf35hl24T62e0gVHFXXVCn8sZD+k3RQ4vRSRBDNrR0RVe7RG:cfFcRppuKg0CN/b/MhhXM8CX3eCAnDlM

Score
10/10
berbewbackdoordiscoverypersistence

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Targets

    • Target

      b04644e68817134102109f8d11c36b45af2f5b0b72749bbfa79bfc97b21fbfbf

    • Size

      87KB

    • MD5

      937439b5f00c7f0bbb2bc113e432eff1

    • SHA1

      cd44f7802f99d92fedf3cc348256926eeccb0011

    • SHA256

      b04644e68817134102109f8d11c36b45af2f5b0b72749bbfa79bfc97b21fbfbf

    • SHA512

      cd7baf01225b8894256611acc917bb5dc378a219d0b9a1f115ed01eb0d1c5d7d7b9d455faa6b83ee224c65d908833e683ab76dc5596e5169bbf7ae943fcd8eb8

    • SSDEEP

      1536:cfIccRM2ZTpuKg0CNf35hl24T62e0gVHFXXVCn8sZD+k3RQ4vRSRBDNrR0RVe7RG:cfFcRppuKg0CN/b/MhhXM8CX3eCAnDlM

    Score
    10/10
    berbewbackdoordiscoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Berbew

      Berbew is a backdoor written in C++.

      backdoorberbew

    • Berbew family

      berbew

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks