Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
dfb6059a0bec64d9f538af5ff6073ee67e0b771cc91811fb6b8f0ea499fce0edN
-
Size
512KB
-
Sample
240928-hagclatfkg
-
MD5
747fa268210e0d8c9b87371cf00e0070
-
SHA1
1b8f3e0abf3d21c0764af9bf60d0b3f2bffe68a8
-
SHA256
dfb6059a0bec64d9f538af5ff6073ee67e0b771cc91811fb6b8f0ea499fce0ed
-
SHA512
3ad2af795315097f9eb9d79de50c9354bc13aee80ee5a2d338b0ca52e650aa5fcae0404e819942b1992f704c1b55a87b77bd5fc22ce9a9c1f107ae492446b9bb
-
SSDEEP
6144:zmYh1GYjiVe6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GTQMJSZO5f7wj7vKn:Vh11kY660fIaDZkY660f8jTK/Xhdz
Static task
static1
Behavioral task
behavioral1
Sample
dfb6059a0bec64d9f538af5ff6073ee67e0b771cc91811fb6b8f0ea499fce0edN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfb6059a0bec64d9f538af5ff6073ee67e0b771cc91811fb6b8f0ea499fce0edN.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
berbew
http://f/wcmd.htm
http://f/ppslog.php
http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
dfb6059a0bec64d9f538af5ff6073ee67e0b771cc91811fb6b8f0ea499fce0edN
-
Size
512KB
-
MD5
747fa268210e0d8c9b87371cf00e0070
-
SHA1
1b8f3e0abf3d21c0764af9bf60d0b3f2bffe68a8
-
SHA256
dfb6059a0bec64d9f538af5ff6073ee67e0b771cc91811fb6b8f0ea499fce0ed
-
SHA512
3ad2af795315097f9eb9d79de50c9354bc13aee80ee5a2d338b0ca52e650aa5fcae0404e819942b1992f704c1b55a87b77bd5fc22ce9a9c1f107ae492446b9bb
-
SSDEEP
6144:zmYh1GYjiVe6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GTQMJSZO5f7wj7vKn:Vh11kY660fIaDZkY660f8jTK/Xhdz
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-