Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
23009b85cde09aef324cac7bba8567c7d938183d0a06c63a79fdb2dd36711bd1
-
Size
55KB
-
Sample
241208-zg4j5stpew
-
MD5
3d9a3709dea6c6eb2d46e49df94fd0ee
-
SHA1
d895fd5e9bc92c0fd7093879302550e9cec01280
-
SHA256
23009b85cde09aef324cac7bba8567c7d938183d0a06c63a79fdb2dd36711bd1
-
SHA512
9560b5b0183045137348d6b8d8603cbfcafddd3cd9378d00653966fdace40c7429381cd0cff310b6fcca22c20249cfdc07fd2837ae131eeb9149c7fe9d8566b8
-
SSDEEP
1536:lzFYc7MBWo9hv4vpM1yc1RQsQNq/wn3VzoNSoNSd0A3shxD6:lzFP7YWDZq/UoNXNW0A8hh
Static task
static1
Behavioral task
behavioral1
Sample
23009b85cde09aef324cac7bba8567c7d938183d0a06c63a79fdb2dd36711bd1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
23009b85cde09aef324cac7bba8567c7d938183d0a06c63a79fdb2dd36711bd1.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://tat-neftbank.ru/kkq.php
http://tat-neftbank.ru/wcmd.htm
Targets
-
-
Target
23009b85cde09aef324cac7bba8567c7d938183d0a06c63a79fdb2dd36711bd1
-
Size
55KB
-
MD5
3d9a3709dea6c6eb2d46e49df94fd0ee
-
SHA1
d895fd5e9bc92c0fd7093879302550e9cec01280
-
SHA256
23009b85cde09aef324cac7bba8567c7d938183d0a06c63a79fdb2dd36711bd1
-
SHA512
9560b5b0183045137348d6b8d8603cbfcafddd3cd9378d00653966fdace40c7429381cd0cff310b6fcca22c20249cfdc07fd2837ae131eeb9149c7fe9d8566b8
-
SSDEEP
1536:lzFYc7MBWo9hv4vpM1yc1RQsQNq/wn3VzoNSoNSd0A3shxD6:lzFP7YWDZq/UoNXNW0A8hh
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-