Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.eabda63709aedf897a37dba81599a9baexe_JC.exe
-
Size
430KB
-
Sample
231006-rke2yscf5w
-
MD5
eabda63709aedf897a37dba81599a9ba
-
SHA1
5b83a8631b27ae97b06e903db99f199f1772f965
-
SHA256
fe27b50ba044b933e6bf7b4c0a39bf9b175b44604d784ea6e83f86a1e8e936fb
-
SHA512
4f01469e07e9b385e1f996a3ea691ae9f920c71526788d56fc43770ebb78abedbe89e3795878970f8a0b15164f918e4b193087ea304625852eb417be4aeb14d8
-
SSDEEP
6144:iEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpd:iMpASIcWYx2U6hAJQnG
Behavioral task
behavioral1
Sample
NEAS.eabda63709aedf897a37dba81599a9baexe_JC.exe
Resource
win7-20230831-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
NEAS.eabda63709aedf897a37dba81599a9baexe_JC.exe
-
Size
430KB
-
MD5
eabda63709aedf897a37dba81599a9ba
-
SHA1
5b83a8631b27ae97b06e903db99f199f1772f965
-
SHA256
fe27b50ba044b933e6bf7b4c0a39bf9b175b44604d784ea6e83f86a1e8e936fb
-
SHA512
4f01469e07e9b385e1f996a3ea691ae9f920c71526788d56fc43770ebb78abedbe89e3795878970f8a0b15164f918e4b193087ea304625852eb417be4aeb14d8
-
SSDEEP
6144:iEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpd:iMpASIcWYx2U6hAJQnG
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-