Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
5744f66a2ddb7516a0b84ac9b24358e6_JC.exe
-
Size
263KB
-
Sample
231005-wzxb1afh83
-
MD5
5744f66a2ddb7516a0b84ac9b24358e6
-
SHA1
2b8ba7a094d6fa1ee10c3ae0bd9306060de01f93
-
SHA256
bd54ba629105c4b1c92b30896bf197571e0b2010a1f8fb6a90b505227460ddc9
-
SHA512
aedb9896c97de3a7560f502c3ba196069f58b9a7aebb7dc931e0c8a8913085f429cce57f2ade6636c11386c0194b8163e6744eab1b4b6fdd1fa852bbb93206af
-
SSDEEP
6144:B5ibQcmlVD+BgotLvTtehd1wLIE92FJ1wZyZUBiTc:BUq+BgotLvTtehd1wd92FJ1Hc
Behavioral task
behavioral1
Sample
5744f66a2ddb7516a0b84ac9b24358e6_JC.exe
Resource
win7-20230831-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.207
Targets
-
-
Target
5744f66a2ddb7516a0b84ac9b24358e6_JC.exe
-
Size
263KB
-
MD5
5744f66a2ddb7516a0b84ac9b24358e6
-
SHA1
2b8ba7a094d6fa1ee10c3ae0bd9306060de01f93
-
SHA256
bd54ba629105c4b1c92b30896bf197571e0b2010a1f8fb6a90b505227460ddc9
-
SHA512
aedb9896c97de3a7560f502c3ba196069f58b9a7aebb7dc931e0c8a8913085f429cce57f2ade6636c11386c0194b8163e6744eab1b4b6fdd1fa852bbb93206af
-
SSDEEP
6144:B5ibQcmlVD+BgotLvTtehd1wLIE92FJ1wZyZUBiTc:BUq+BgotLvTtehd1wd92FJ1Hc
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-