Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
eb88ae107c52f3fb5e4c9f7ee83fb3ac9a0a0765eef66fa905ce8bec3ef1b6bb
-
Size
92KB
-
Sample
241208-ewdl2sxlgq
-
MD5
fc37e7627c79a227ca023560dc138ab4
-
SHA1
4fc2eed9e31d4f090b845a61e65fd64190341203
-
SHA256
eb88ae107c52f3fb5e4c9f7ee83fb3ac9a0a0765eef66fa905ce8bec3ef1b6bb
-
SHA512
2c6c08a0cde9264c774c79c5aff543ca5dd6209313099076cfa6bb1d6aee663006b44a1244c6d6240add33918932f01e5c005a2fe31321da002d607a9c7f761c
-
SSDEEP
1536:n41TGImwVwZRVRl2dG+eo1xC0GZFXUmSC2e3le:cTGGwdRl24ho1mtye3le
Static task
static1
Behavioral task
behavioral1
Sample
eb88ae107c52f3fb5e4c9f7ee83fb3ac9a0a0765eef66fa905ce8bec3ef1b6bb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb88ae107c52f3fb5e4c9f7ee83fb3ac9a0a0765eef66fa905ce8bec3ef1b6bb.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://tat-neftbank.ru/kkq.php
http://tat-neftbank.ru/wcmd.htm
Targets
-
-
Target
eb88ae107c52f3fb5e4c9f7ee83fb3ac9a0a0765eef66fa905ce8bec3ef1b6bb
-
Size
92KB
-
MD5
fc37e7627c79a227ca023560dc138ab4
-
SHA1
4fc2eed9e31d4f090b845a61e65fd64190341203
-
SHA256
eb88ae107c52f3fb5e4c9f7ee83fb3ac9a0a0765eef66fa905ce8bec3ef1b6bb
-
SHA512
2c6c08a0cde9264c774c79c5aff543ca5dd6209313099076cfa6bb1d6aee663006b44a1244c6d6240add33918932f01e5c005a2fe31321da002d607a9c7f761c
-
SSDEEP
1536:n41TGImwVwZRVRl2dG+eo1xC0GZFXUmSC2e3le:cTGGwdRl24ho1mtye3le
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-