Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
db0bb6119c84149f592265660742cf1897c9ee54a9116269993b7133308f3759
-
Size
100KB
-
Sample
241013-ejvpssyarb
-
MD5
b914833fbb5480d8d1882a7161d32e1b
-
SHA1
75e62fb49e8e6dcf60a6fb50ea93480efaf19e38
-
SHA256
db0bb6119c84149f592265660742cf1897c9ee54a9116269993b7133308f3759
-
SHA512
c6c912870e6ce7126b8281577a987aff2c1d8bfa6b1be7c5c7e418d1bca4de4eb21c2ccf0dda22fa9166a339e454d69fe32a66c08c4532ae5e164bdeb5f58454
-
SSDEEP
3072:V3a3hk4I4lrO9lPeZN0Ncmgb3a3+X13XRzT:VqR5IIRf7aOl3BzT
Static task
static1
Behavioral task
behavioral1
Sample
db0bb6119c84149f592265660742cf1897c9ee54a9116269993b7133308f3759.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db0bb6119c84149f592265660742cf1897c9ee54a9116269993b7133308f3759.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://f/wcmd.htm
http://f/ppslog.php
http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
db0bb6119c84149f592265660742cf1897c9ee54a9116269993b7133308f3759
-
Size
100KB
-
MD5
b914833fbb5480d8d1882a7161d32e1b
-
SHA1
75e62fb49e8e6dcf60a6fb50ea93480efaf19e38
-
SHA256
db0bb6119c84149f592265660742cf1897c9ee54a9116269993b7133308f3759
-
SHA512
c6c912870e6ce7126b8281577a987aff2c1d8bfa6b1be7c5c7e418d1bca4de4eb21c2ccf0dda22fa9166a339e454d69fe32a66c08c4532ae5e164bdeb5f58454
-
SSDEEP
3072:V3a3hk4I4lrO9lPeZN0Ncmgb3a3+X13XRzT:VqR5IIRf7aOl3BzT
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-