Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

0311426712...2N.exe

windows7-x64

10

0311426712...2N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    031142671237f25138543322e9a0afa5746b562b8527820a0a5275b97de90972N

  • Size

    96KB

  • Sample

    240927-l1j3yszckc

  • MD5

    a2ff9fbefbda03808d1cf403bfabf940

  • SHA1

    832eef1bc15912368d105d97ebe0aef367afc7c6

  • SHA256

    031142671237f25138543322e9a0afa5746b562b8527820a0a5275b97de90972

  • SHA512

    dcb2e6f77a16781798dcf7a773a8e8512bcfb0dac665faf8050ea30889156148762373d7ae386e3fc8b4d3cc27ca9aa150af000107258dbfff8db53af621d21f

  • SSDEEP

    1536:f2bNk8u++nWN41ZTRz46fEeo8r8PJpCj2td74S7V+5pUMv84WMRw8Dkqq:f2pF+Z2FAmMi54Sp+7H7wWkqq

Score
10/10
berbewbackdoordiscoverypersistence

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Targets

    • Target

      031142671237f25138543322e9a0afa5746b562b8527820a0a5275b97de90972N

    • Size

      96KB

    • MD5

      a2ff9fbefbda03808d1cf403bfabf940

    • SHA1

      832eef1bc15912368d105d97ebe0aef367afc7c6

    • SHA256

      031142671237f25138543322e9a0afa5746b562b8527820a0a5275b97de90972

    • SHA512

      dcb2e6f77a16781798dcf7a773a8e8512bcfb0dac665faf8050ea30889156148762373d7ae386e3fc8b4d3cc27ca9aa150af000107258dbfff8db53af621d21f

    • SSDEEP

      1536:f2bNk8u++nWN41ZTRz46fEeo8r8PJpCj2td74S7V+5pUMv84WMRw8Dkqq:f2pF+Z2FAmMi54Sp+7H7wWkqq

    Score
    10/10
    berbewbackdoordiscoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Berbew

      Berbew is a backdoor written in C++.

      backdoorberbew

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks