Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

e1fa82aa82...aN.exe

windows7-x64

10

e1fa82aa82...aN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1fa82aa821a0518e335c53c249de34a1bc1d714e19aee25a142ebaf79e5d85aN.exe

  • Size

    377KB

  • MD5

    d56ae216482241441dd29dbb393e6c30

  • SHA1

    8c3d823d996ec9f3816542c2b87459e8617f8c88

  • SHA256

    e1fa82aa821a0518e335c53c249de34a1bc1d714e19aee25a142ebaf79e5d85a

  • SHA512

    8d13a848960323bbe428d8fd3637932418928264d6b0870f35e6d2e637a1caae4e69f260115e6a1115208f3871b9fe3e78665486383dc8e104113adc61452532

  • SSDEEP

    6144:9kyHB7NaGSgnohijgAUv5fKx/SgnohignC5VA:9kyH7dMTv5i1dayVA

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://crutop.nu/index.php

http://devx.nm.ru/index.php

http://ros-neftbank.ru/index.php

http://master-x.com/index.php

http://www.redline.ru/index.php

http://cvv.ru/index.php

http://hackers.lv/index.php

http://fethard.biz/index.php

http://crutop.ru/index.php

http://kaspersky.ru/index.php

http://color-bank.ru/index.php

http://adult-empire.com/index.php

http://virus-list.com/index.php

http://trojan.ru/index.php

http://xware.cjb.net/index.htm

http://konfiskat.org/index.htm

http://parex-bank.ru/index.htm

http://fethard.biz/index.htm

http://ldark.nm.ru/index.htm

http://gaz-prom.ru/index.htm

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e1fa82aa821a0518e335c53c249de34a1bc1d714e19aee25a142ebaf79e5d85aN.exe
    .exe windows:1 windows x86 arch:x86

    c2a87fabf96470db507b2e6b43bd92eb


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.