Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9a032eb02863b5126b839987cbe902081c198b757b19bfc3068ea865b31a96e4
-
Size
768KB
-
Sample
240926-ahfr2ayemc
-
MD5
e9ec606c92131b806c630dd0464c4219
-
SHA1
70944c0e016795db98d04f1e88e5fcaecf90fb63
-
SHA256
9a032eb02863b5126b839987cbe902081c198b757b19bfc3068ea865b31a96e4
-
SHA512
c20b481db67e8533aad6b6c35cf837706c9a86e62f35861551cd1f4d83ecd6c1516608ea674aacbc2231e882b9bbff05a7762c76aeef3a3f043d7e16fe7063c5
-
SSDEEP
12288:MWKaFn/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KF4cr6VDsEqacjgqANXcol27ZO:XKSnm0BmmvFimm0Xcr6VDsEqacjgqAN1
Static task
static1
Behavioral task
behavioral1
Sample
9a032eb02863b5126b839987cbe902081c198b757b19bfc3068ea865b31a96e4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9a032eb02863b5126b839987cbe902081c198b757b19bfc3068ea865b31a96e4.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
berbew
http://f/wcmd.htm
http://f/ppslog.php
http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
9a032eb02863b5126b839987cbe902081c198b757b19bfc3068ea865b31a96e4
-
Size
768KB
-
MD5
e9ec606c92131b806c630dd0464c4219
-
SHA1
70944c0e016795db98d04f1e88e5fcaecf90fb63
-
SHA256
9a032eb02863b5126b839987cbe902081c198b757b19bfc3068ea865b31a96e4
-
SHA512
c20b481db67e8533aad6b6c35cf837706c9a86e62f35861551cd1f4d83ecd6c1516608ea674aacbc2231e882b9bbff05a7762c76aeef3a3f043d7e16fe7063c5
-
SSDEEP
12288:MWKaFn/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KF4cr6VDsEqacjgqANXcol27ZO:XKSnm0BmmvFimm0Xcr6VDsEqacjgqAN1
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-