Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
70b1eefe77c7520a274226028f7f7bc604e72109f8ed0d856aabfda6f6c9c5d8N
-
Size
217KB
-
Sample
241014-fa2mesyfng
-
MD5
2e423de7b267d15076aee8a58c725860
-
SHA1
14567afd53294283f521b478416bbd8e159fd674
-
SHA256
70b1eefe77c7520a274226028f7f7bc604e72109f8ed0d856aabfda6f6c9c5d8
-
SHA512
f735e45ae7b3ffb7dc11094f80bdd197f6d8a53dfdd024966bc36c18e77a853ffb1817b8e37c5caea2f786e043456aa7486a78091024be46040be728ca32dcd5
-
SSDEEP
3072:rtUAhfWdQZh9tZVEX15teiGpO7eS5pAgYIqGvJ6887lbyMGjXF1kqaholmtbCQVD:CO+iZDtZVEF5eO7dZMGXF5ahdt3
Behavioral task
behavioral1
Sample
70b1eefe77c7520a274226028f7f7bc604e72109f8ed0d856aabfda6f6c9c5d8N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
70b1eefe77c7520a274226028f7f7bc604e72109f8ed0d856aabfda6f6c9c5d8N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://f/wcmd.htm
http://f/ppslog.php
http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
70b1eefe77c7520a274226028f7f7bc604e72109f8ed0d856aabfda6f6c9c5d8N
-
Size
217KB
-
MD5
2e423de7b267d15076aee8a58c725860
-
SHA1
14567afd53294283f521b478416bbd8e159fd674
-
SHA256
70b1eefe77c7520a274226028f7f7bc604e72109f8ed0d856aabfda6f6c9c5d8
-
SHA512
f735e45ae7b3ffb7dc11094f80bdd197f6d8a53dfdd024966bc36c18e77a853ffb1817b8e37c5caea2f786e043456aa7486a78091024be46040be728ca32dcd5
-
SSDEEP
3072:rtUAhfWdQZh9tZVEX15teiGpO7eS5pAgYIqGvJ6887lbyMGjXF1kqaholmtbCQVD:CO+iZDtZVEF5eO7dZMGXF5ahdt3
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-