Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1bbb6ed55031cd430c482cfef48ed5fc9996a3f5e4d0420eac658a459de793bdN.exe

  • Size

    344KB

  • MD5

    c0819d784e7f328e8c06dfd813edf490

  • SHA1

    e55e1dbecbde709cac5b873fff3f645d128ae56c

  • SHA256

    1bbb6ed55031cd430c482cfef48ed5fc9996a3f5e4d0420eac658a459de793bd

  • SHA512

    53261cacab4db0549b06c59150707ba9fe4d2142ca1a6d2bf0daf75eaed367cca28073bca9ccecdfa44733e1644bd9157095c1f25fd5dad3964717cfe440f060

  • SSDEEP

    6144:3oaGW5xACpX2/mnbzvdLaD6OkPgl6bmIjlQFn:4afYCpXImbzQD6OkPgl6bmIjKn

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1bbb6ed55031cd430c482cfef48ed5fc9996a3f5e4d0420eac658a459de793bdN.exe
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections