Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d6fa9954de2ff65e2e77e550642dea4a656125026ce57274e33d8c671e86c9b7.exe

  • Size

    448KB

  • MD5

    0a826f9b6964f136ee90c65f2cd55aeb

  • SHA1

    a3b656216770b4ccdb314674b3177f253ef11da6

  • SHA256

    d6fa9954de2ff65e2e77e550642dea4a656125026ce57274e33d8c671e86c9b7

  • SHA512

    9b34e63edd4791dae37787ee88f7e83612b73243c728c63f6a405a781166520a1b060c87d31ce3040e6251909003d5cd87949a9f6929f0f569a1497fc28ff098

  • SSDEEP

    6144:X80XVyr2xiLUmKyIxLDXXoq9FJZCUmKyIxL4:s0Xs6832XXf9Do3p

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d6fa9954de2ff65e2e77e550642dea4a656125026ce57274e33d8c671e86c9b7.exe
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections