Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
bbaf638c2dd062f271d088a20d1bba2b61c2ce320ea8ecc2bac06cdfe82b6320N
-
Size
96KB
-
Sample
241012-t49f1szere
-
MD5
fb38f12051e32a1a6cef53a511491030
-
SHA1
c473d1629624f96756adc56977e1bf91e0e43925
-
SHA256
bbaf638c2dd062f271d088a20d1bba2b61c2ce320ea8ecc2bac06cdfe82b6320
-
SHA512
41295b984aa23cd3d8f15296f8016a9818bb5b393e4c3fbdbbcafb744d722804ac68c015c0074b4f5bec04e5c03b587e689d3c3887e7344da455ee57628c6231
-
SSDEEP
1536:ia7AtYOwOxhMsJeHQMD5x83puEL1RiBHm70x2tS674S7V+5pUMv84WMRw8Dkqq:d7AtYOwGMW1McpuEPOiB4Sp+7H7wWkqq
Static task
static1
Behavioral task
behavioral1
Sample
bbaf638c2dd062f271d088a20d1bba2b61c2ce320ea8ecc2bac06cdfe82b6320N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bbaf638c2dd062f271d088a20d1bba2b61c2ce320ea8ecc2bac06cdfe82b6320N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://f/wcmd.htm
http://f/ppslog.php
http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
bbaf638c2dd062f271d088a20d1bba2b61c2ce320ea8ecc2bac06cdfe82b6320N
-
Size
96KB
-
MD5
fb38f12051e32a1a6cef53a511491030
-
SHA1
c473d1629624f96756adc56977e1bf91e0e43925
-
SHA256
bbaf638c2dd062f271d088a20d1bba2b61c2ce320ea8ecc2bac06cdfe82b6320
-
SHA512
41295b984aa23cd3d8f15296f8016a9818bb5b393e4c3fbdbbcafb744d722804ac68c015c0074b4f5bec04e5c03b587e689d3c3887e7344da455ee57628c6231
-
SSDEEP
1536:ia7AtYOwOxhMsJeHQMD5x83puEL1RiBHm70x2tS674S7V+5pUMv84WMRw8Dkqq:d7AtYOwGMW1McpuEPOiB4Sp+7H7wWkqq
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-