Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ba40bb162d3756f406212a8817cb4178f1c9a19afc927655f530292bf0ae65f3N
-
Size
240KB
-
Sample
241014-a21asaybqr
-
MD5
de263b8431ab7307e2896a38b030b510
-
SHA1
b6a8690093a5b5612cbf711012477fc8e940002b
-
SHA256
ba40bb162d3756f406212a8817cb4178f1c9a19afc927655f530292bf0ae65f3
-
SHA512
a389411cb826ff0185d61c1a6208ecf0487e4829236223cffd539d09f156ce4b716b2c1e10708da3da8964eff856c1e7fe6a3a4f233103c15dda920a0fa2ded2
-
SSDEEP
6144:PFviWdqpRsGyZ6YugQdjGG1wsKm6eBgdQbkoKTBEA:P5i4qpSGyXu1jGG1wsGeBgRTGA
Behavioral task
behavioral1
Sample
ba40bb162d3756f406212a8817cb4178f1c9a19afc927655f530292bf0ae65f3N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ba40bb162d3756f406212a8817cb4178f1c9a19afc927655f530292bf0ae65f3N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://f/wcmd.htm
http://f/ppslog.php
http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
ba40bb162d3756f406212a8817cb4178f1c9a19afc927655f530292bf0ae65f3N
-
Size
240KB
-
MD5
de263b8431ab7307e2896a38b030b510
-
SHA1
b6a8690093a5b5612cbf711012477fc8e940002b
-
SHA256
ba40bb162d3756f406212a8817cb4178f1c9a19afc927655f530292bf0ae65f3
-
SHA512
a389411cb826ff0185d61c1a6208ecf0487e4829236223cffd539d09f156ce4b716b2c1e10708da3da8964eff856c1e7fe6a3a4f233103c15dda920a0fa2ded2
-
SSDEEP
6144:PFviWdqpRsGyZ6YugQdjGG1wsKm6eBgdQbkoKTBEA:P5i4qpSGyXu1jGG1wsGeBgRTGA
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-