Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    dc49da22864e20476017a121dbbdc7a399d5a9221eb52ffa6e6b24deadbbe5c1N.exe

  • Size

    400KB

  • MD5

    ceee5b80b346b5d0c0f16834e2e0aa10

  • SHA1

    43a00838f91e52fb3a3fe0d466a3aac96e3b0011

  • SHA256

    dc49da22864e20476017a121dbbdc7a399d5a9221eb52ffa6e6b24deadbbe5c1

  • SHA512

    9f13a179b4b460a6e8819cef63653b45c78e7a2ca1fa0db5d82b5002cc24b673b12bb01a54f052f0677e39f074061597b9893d7ac7549c6ac00752e9e4d1dad1

  • SSDEEP

    6144:eb5eV6r6/CSQYJ8wEbbL5lULW8wEbq9ByvZ6Mxv5Rar3O6B9fZSLhZmz+:/Vv2o8wE39uW8wESByvNv54B9f01ZmC

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dc49da22864e20476017a121dbbdc7a399d5a9221eb52ffa6e6b24deadbbe5c1N.exe
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections