Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1e807ce3c655cd0fd3a074af9578c01ef5470c5c4c0c3404e8f058a10154b534.exe
-
Size
112KB
-
Sample
250325-njbflavxgy
-
MD5
6b95c38f49904840993da779448a5c10
-
SHA1
3f4046cc84b673155ce1515e91c23a9e9887ef22
-
SHA256
1e807ce3c655cd0fd3a074af9578c01ef5470c5c4c0c3404e8f058a10154b534
-
SHA512
513914955ab699eeb16c67c7db7387644c6eac84403040c084e03d4ee07b0fa3035e75e311755d2d9ef2e5d5afdb159c46d9d722b691e821bfd7e988fa189f58
-
SSDEEP
1536:zHHfJABdidX0Ou0aciPotTmix7YszOy6QogZ2m6j0s20pq4A+wcikRynlypv8LIV:7WidFcPkmQ6y6QM/p2+v+lc802eSQ
Static task
static1
Behavioral task
behavioral1
Sample
1e807ce3c655cd0fd3a074af9578c01ef5470c5c4c0c3404e8f058a10154b534.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
1e807ce3c655cd0fd3a074af9578c01ef5470c5c4c0c3404e8f058a10154b534.exe
Resource
win10v2004-20250314-en
Malware Config
Extracted
berbew
http://f/wcmd.htm
http://f/ppslog.php
http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
1e807ce3c655cd0fd3a074af9578c01ef5470c5c4c0c3404e8f058a10154b534.exe
-
Size
112KB
-
MD5
6b95c38f49904840993da779448a5c10
-
SHA1
3f4046cc84b673155ce1515e91c23a9e9887ef22
-
SHA256
1e807ce3c655cd0fd3a074af9578c01ef5470c5c4c0c3404e8f058a10154b534
-
SHA512
513914955ab699eeb16c67c7db7387644c6eac84403040c084e03d4ee07b0fa3035e75e311755d2d9ef2e5d5afdb159c46d9d722b691e821bfd7e988fa189f58
-
SSDEEP
1536:zHHfJABdidX0Ou0aciPotTmix7YszOy6QogZ2m6j0s20pq4A+wcikRynlypv8LIV:7WidFcPkmQ6y6QM/p2+v+lc802eSQ
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-