Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b7257140836c6ec002fb77e6ce6386fa385e58bdd0d7f82674cd37c01054e910N.exe
-
Size
67KB
-
Sample
240925-mwcnravaqd
-
MD5
0969584c0670f567151a759559b076f0
-
SHA1
e91efbae04a3125ac97144f90fc73b027a0235f5
-
SHA256
b7257140836c6ec002fb77e6ce6386fa385e58bdd0d7f82674cd37c01054e910
-
SHA512
28dbd33f66e98a4aa5864b65428a1a9063f06311ab126f88940caed1715de05fdaaf17ddd075102fce4fe55ce87393843a1d2f1ffd036f3c98b77627be52fa1f
-
SSDEEP
1536:O2UVmtT5euTI8Lwa1VkOLcNRE9IMUy2UKXa5XzRQZR/Rj:OLVmp5euTDLh1VkdD/y2U+aleZVx
Static task
static1
Behavioral task
behavioral1
Sample
b7257140836c6ec002fb77e6ce6386fa385e58bdd0d7f82674cd37c01054e910N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b7257140836c6ec002fb77e6ce6386fa385e58bdd0d7f82674cd37c01054e910N.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
berbew
http://viruslist.com/wcmd.txt
http://viruslist.com/ppslog.php
http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
b7257140836c6ec002fb77e6ce6386fa385e58bdd0d7f82674cd37c01054e910N.exe
-
Size
67KB
-
MD5
0969584c0670f567151a759559b076f0
-
SHA1
e91efbae04a3125ac97144f90fc73b027a0235f5
-
SHA256
b7257140836c6ec002fb77e6ce6386fa385e58bdd0d7f82674cd37c01054e910
-
SHA512
28dbd33f66e98a4aa5864b65428a1a9063f06311ab126f88940caed1715de05fdaaf17ddd075102fce4fe55ce87393843a1d2f1ffd036f3c98b77627be52fa1f
-
SSDEEP
1536:O2UVmtT5euTI8Lwa1VkOLcNRE9IMUy2UKXa5XzRQZR/Rj:OLVmp5euTDLh1VkdD/y2U+aleZVx
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-