Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    cd85758ee5cccdf9ece1d7dafa4dba4ff4967b0d3f3721d6e814f801771ecf3b

  • Size

    59KB

  • Sample

    250305-l1t8xswls2

  • MD5

    8dc5730ab511f06206b1c7eea9e876d0

  • SHA1

    89415ad25672ea50ad2981b8cb7dae8680b55a46

  • SHA256

    cd85758ee5cccdf9ece1d7dafa4dba4ff4967b0d3f3721d6e814f801771ecf3b

  • SHA512

    990a7c68356e5b97ede92aad744768244a1d8099ba74760ee0f91dcdfad2acfaae744b553453b1bab600f442d4e290746ce781d76789c398c819005e9012a6ee

  • SSDEEP

    768:Sf9dI7p0m44+c5GYDWarb0RtmiioxAZVOpLnpwv7EHGVSTAHNTBluQoSZ/1H5s3z:SWA9QdIAS0HNTPuQbe5NCyVso

Malware Config

Targets

    • Target

      cd85758ee5cccdf9ece1d7dafa4dba4ff4967b0d3f3721d6e814f801771ecf3b

    • Size

      59KB

    • MD5

      8dc5730ab511f06206b1c7eea9e876d0

    • SHA1

      89415ad25672ea50ad2981b8cb7dae8680b55a46

    • SHA256

      cd85758ee5cccdf9ece1d7dafa4dba4ff4967b0d3f3721d6e814f801771ecf3b

    • SHA512

      990a7c68356e5b97ede92aad744768244a1d8099ba74760ee0f91dcdfad2acfaae744b553453b1bab600f442d4e290746ce781d76789c398c819005e9012a6ee

    • SSDEEP

      768:Sf9dI7p0m44+c5GYDWarb0RtmiioxAZVOpLnpwv7EHGVSTAHNTBluQoSZ/1H5s3z:SWA9QdIAS0HNTPuQbe5NCyVso

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Berbew

      Berbew is a backdoor written in C++.

    • Berbew family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks