Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
feea3e519a14cd6f7c3c07aec2f34f9cda63a72db78896d5fb6d9080a356dc56N
-
Size
276KB
-
Sample
240921-v4mgxsvamc
-
MD5
ea3ea5ec636bce993e41989ba5d737f0
-
SHA1
02afaf172addacde5b668af27fd027b5c4b5133b
-
SHA256
feea3e519a14cd6f7c3c07aec2f34f9cda63a72db78896d5fb6d9080a356dc56
-
SHA512
f2c04b2068e10008f91b0270da508860eee7e9c6d3f0dabe6f3760b9d60704b20ea8f1123c45bc0cd95feccec9954ee2edc8358b8a9d1b047e216030b5a57f15
-
SSDEEP
6144:PqX7MKsnRByfa/iROdWZHEFJ7aWN1rtMsQBOSGaF+:CX7IyS2HEGWN1RMs1S7
Behavioral task
behavioral1
Sample
feea3e519a14cd6f7c3c07aec2f34f9cda63a72db78896d5fb6d9080a356dc56N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
feea3e519a14cd6f7c3c07aec2f34f9cda63a72db78896d5fb6d9080a356dc56N.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
berbew
http://f/wcmd.htm
http://f/ppslog.php
http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
feea3e519a14cd6f7c3c07aec2f34f9cda63a72db78896d5fb6d9080a356dc56N
-
Size
276KB
-
MD5
ea3ea5ec636bce993e41989ba5d737f0
-
SHA1
02afaf172addacde5b668af27fd027b5c4b5133b
-
SHA256
feea3e519a14cd6f7c3c07aec2f34f9cda63a72db78896d5fb6d9080a356dc56
-
SHA512
f2c04b2068e10008f91b0270da508860eee7e9c6d3f0dabe6f3760b9d60704b20ea8f1123c45bc0cd95feccec9954ee2edc8358b8a9d1b047e216030b5a57f15
-
SSDEEP
6144:PqX7MKsnRByfa/iROdWZHEFJ7aWN1rtMsQBOSGaF+:CX7IyS2HEGWN1RMs1S7
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-