Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

cbd2db0b50...83.exe

windows7-x64

10

cbd2db0b50...83.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cbd2db0b5093c87cae26292da104acba78c6a236c006d6974f17f55cd832f183

  • Size

    73KB

  • Sample

    250305-lsd7qswj13

  • MD5

    417000924f37988cfa8bc2c990c93b9b

  • SHA1

    611eedd881d79f010b7fd4b28003f396ef96a345

  • SHA256

    cbd2db0b5093c87cae26292da104acba78c6a236c006d6974f17f55cd832f183

  • SHA512

    19828bb75489163f08f806c182c5671a917b0ca8e70ed989ff49558f88c9a47291153000fb0af5d5f5204b01321bf138ac529495966f2d319af3c197245a69b0

  • SSDEEP

    1536:4elXBKlv1aSOtGam7u2O5fNgD04SjcybQdA7k+WcEV3x:nBcDOttmh704XybQUTSlx

Score
10/10
berbewbackdoordiscoverypersistence

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Targets

    • Target

      cbd2db0b5093c87cae26292da104acba78c6a236c006d6974f17f55cd832f183

    • Size

      73KB

    • MD5

      417000924f37988cfa8bc2c990c93b9b

    • SHA1

      611eedd881d79f010b7fd4b28003f396ef96a345

    • SHA256

      cbd2db0b5093c87cae26292da104acba78c6a236c006d6974f17f55cd832f183

    • SHA512

      19828bb75489163f08f806c182c5671a917b0ca8e70ed989ff49558f88c9a47291153000fb0af5d5f5204b01321bf138ac529495966f2d319af3c197245a69b0

    • SSDEEP

      1536:4elXBKlv1aSOtGam7u2O5fNgD04SjcybQdA7k+WcEV3x:nBcDOttmh704XybQUTSlx

    Score
    10/10
    berbewbackdoordiscoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Berbew

      Berbew is a backdoor written in C++.

      backdoorberbew

    • Berbew family

      berbew

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks