Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ac3d4706446e106af71c4a04dd0362c24ed4212e812b790213e8c9a892559c60N.exe

  • Size

    428KB

  • MD5

    9a9bdd63f493daedc1270acd116478d0

  • SHA1

    659395fae082cbf01ce23fa861a9b2ba9f8ebb4e

  • SHA256

    ac3d4706446e106af71c4a04dd0362c24ed4212e812b790213e8c9a892559c60

  • SHA512

    9647f953f21e049c4d61af4028664c87f13e2b1ac8fc1224701bff0125e1927cb821f5e4591a2054f6c69887cd5c4505d2b4c00f0ffb8741603b03a9b9459df6

  • SSDEEP

    6144:BgzbwbX5ZXZuKVp1fNrNF5ZXZ7SEJtKa4sFj5tPNki9HZd1sFj5tg:Bg85hjtFrNF5h0EJtws15tPWu5Ls15tg

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ac3d4706446e106af71c4a04dd0362c24ed4212e812b790213e8c9a892559c60N.exe
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections