Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
PBQB.cmd
-
Size
366KB
-
Sample
230505-nemytshf87
-
MD5
4b5e91dc56c53e6d9a765c8fda760786
-
SHA1
f2081c4500b6f324ab840bc1dd89370d355367ef
-
SHA256
c112a2d7b7f2d1297d817b89dcdea142b4bd439bd533db9f6aa8b36d8d943d64
-
SHA512
ef5f8186f33ce964875adac3e151b9a6f036a8ad9c86c6b017ed8185da967c1693e62135a2c59ae5737dd4d1b35aa63d805a7a84352797aeb8c7cbe55d39378b
-
SSDEEP
6144:ds0RP07shisP903rwOoQ2zUT540YjzcPuhLJpQyaTRBIT4uxWVqxcS4DHATSNfw3:ds0C7Yt67rd4rAPA4yaTcdfP4Tbqdsy
Static task
static1
Behavioral task
behavioral1
Sample
PBQB.cmd
Resource
win7-20230220-en
Malware Config
Extracted
amadey
3.70
myserveur855.cc/8bmeVwqx/index.php
Targets
-
-
Target
PBQB.cmd
-
Size
366KB
-
MD5
4b5e91dc56c53e6d9a765c8fda760786
-
SHA1
f2081c4500b6f324ab840bc1dd89370d355367ef
-
SHA256
c112a2d7b7f2d1297d817b89dcdea142b4bd439bd533db9f6aa8b36d8d943d64
-
SHA512
ef5f8186f33ce964875adac3e151b9a6f036a8ad9c86c6b017ed8185da967c1693e62135a2c59ae5737dd4d1b35aa63d805a7a84352797aeb8c7cbe55d39378b
-
SSDEEP
6144:ds0RP07shisP903rwOoQ2zUT540YjzcPuhLJpQyaTRBIT4uxWVqxcS4DHATSNfw3:ds0C7Yt67rd4rAPA4yaTcdfP4Tbqdsy
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-