Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
070317428e76cec641abd6f5d98752a6163a26643b7d6ea212685db71d7bab88
-
Size
194KB
-
Sample
240925-wy2v4atbmh
-
MD5
899ca6b58fea2ba3c90baef1c367acea
-
SHA1
b9ef61c6326e291e38b456c7b43c2aa13eec5210
-
SHA256
070317428e76cec641abd6f5d98752a6163a26643b7d6ea212685db71d7bab88
-
SHA512
2d59aab67ccab0f905749e1c155620163a3f55e0571f5b465ef3b36ada7ba93cbb64b34996c2db6b538016e660a84abb481c8a0af39dd1934c8cb75ff65a4b32
-
SSDEEP
3072:h8jrVzkuFQHqmzCdSfUNRbCeR0pN03xWlJ7mlOD6pN03:hfOmzCdSfUNRbCeKpNYxWlJ7mkD6pNY
Behavioral task
behavioral1
Sample
070317428e76cec641abd6f5d98752a6163a26643b7d6ea212685db71d7bab88.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
070317428e76cec641abd6f5d98752a6163a26643b7d6ea212685db71d7bab88.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
berbew
http://tat-neftbank.ru/kkq.php
http://tat-neftbank.ru/wcmd.htm
Targets
-
-
Target
070317428e76cec641abd6f5d98752a6163a26643b7d6ea212685db71d7bab88
-
Size
194KB
-
MD5
899ca6b58fea2ba3c90baef1c367acea
-
SHA1
b9ef61c6326e291e38b456c7b43c2aa13eec5210
-
SHA256
070317428e76cec641abd6f5d98752a6163a26643b7d6ea212685db71d7bab88
-
SHA512
2d59aab67ccab0f905749e1c155620163a3f55e0571f5b465ef3b36ada7ba93cbb64b34996c2db6b538016e660a84abb481c8a0af39dd1934c8cb75ff65a4b32
-
SSDEEP
3072:h8jrVzkuFQHqmzCdSfUNRbCeR0pN03xWlJ7mlOD6pN03:hfOmzCdSfUNRbCeKpNYxWlJ7mkD6pNY
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-