Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4352219936b43a2c383083251ea463690e31a20c72da5eed941d5eb1852c17e6N
-
Size
59KB
-
Sample
240929-2pl16sxhjf
-
MD5
5b896d7265db523330afb7d4a8ab4250
-
SHA1
e13c7c1ce34a77a3b7f437cf7f67f9bf63bdaeb3
-
SHA256
4352219936b43a2c383083251ea463690e31a20c72da5eed941d5eb1852c17e6
-
SHA512
03a19037726f39d21594acdddf637fc954c22f888b7155d4ffc28c5931b8bedcbf30e30ce726cd7afdca69f1ff41a32f14b6b1c0aabbaf15b156c2b4ab60110f
-
SSDEEP
768:cYRgpYw3nWrH4NszC5WMsUGLuc7s5rbPPGL5b8IHP/n2Z/1H5Axl5nf1fZMEBFEI:vRIRXiGs+5W9UWp9b8IH8YNCyVso
Static task
static1
Behavioral task
behavioral1
Sample
4352219936b43a2c383083251ea463690e31a20c72da5eed941d5eb1852c17e6N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4352219936b43a2c383083251ea463690e31a20c72da5eed941d5eb1852c17e6N.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
berbew
http://tat-neftbank.ru/kkq.php
http://tat-neftbank.ru/wcmd.htm
Targets
-
-
Target
4352219936b43a2c383083251ea463690e31a20c72da5eed941d5eb1852c17e6N
-
Size
59KB
-
MD5
5b896d7265db523330afb7d4a8ab4250
-
SHA1
e13c7c1ce34a77a3b7f437cf7f67f9bf63bdaeb3
-
SHA256
4352219936b43a2c383083251ea463690e31a20c72da5eed941d5eb1852c17e6
-
SHA512
03a19037726f39d21594acdddf637fc954c22f888b7155d4ffc28c5931b8bedcbf30e30ce726cd7afdca69f1ff41a32f14b6b1c0aabbaf15b156c2b4ab60110f
-
SSDEEP
768:cYRgpYw3nWrH4NszC5WMsUGLuc7s5rbPPGL5b8IHP/n2Z/1H5Axl5nf1fZMEBFEI:vRIRXiGs+5W9UWp9b8IH8YNCyVso
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-