Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d0decddbf0876f97f28bb975d18085ff89a3b3ab24cfb6d0a377076ab83c7e60
-
Size
280KB
-
Sample
241005-dwyrjssekp
-
MD5
a34cbe2c9077635f1aa4f07c1dd06ed8
-
SHA1
f4e5963846d89afc537c9f471ffda5bf294ba248
-
SHA256
d0decddbf0876f97f28bb975d18085ff89a3b3ab24cfb6d0a377076ab83c7e60
-
SHA512
ea5d99c22db8292f9052f515e6b5e8b6027a752c406ac657d6e5bee877a0210fba4e7fd5f4fc00b2e1438a8131ec48b50eefc7c729266cf07efc01e341a2b9b3
-
SSDEEP
6144:Iy9vCPAJlj/dDBi/GOORjMmRUoooooooooooooooooooooooooy/G3:IMvCoJvdi//OVLCoooooooooooooooom
Static task
static1
Behavioral task
behavioral1
Sample
d0decddbf0876f97f28bb975d18085ff89a3b3ab24cfb6d0a377076ab83c7e60.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0decddbf0876f97f28bb975d18085ff89a3b3ab24cfb6d0a377076ab83c7e60.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
berbew
http://f/wcmd.htm
http://f/ppslog.php
http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
d0decddbf0876f97f28bb975d18085ff89a3b3ab24cfb6d0a377076ab83c7e60
-
Size
280KB
-
MD5
a34cbe2c9077635f1aa4f07c1dd06ed8
-
SHA1
f4e5963846d89afc537c9f471ffda5bf294ba248
-
SHA256
d0decddbf0876f97f28bb975d18085ff89a3b3ab24cfb6d0a377076ab83c7e60
-
SHA512
ea5d99c22db8292f9052f515e6b5e8b6027a752c406ac657d6e5bee877a0210fba4e7fd5f4fc00b2e1438a8131ec48b50eefc7c729266cf07efc01e341a2b9b3
-
SSDEEP
6144:Iy9vCPAJlj/dDBi/GOORjMmRUoooooooooooooooooooooooooy/G3:IMvCoJvdi//OVLCoooooooooooooooom
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-