Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
70dffc95dc1f94ad8f908407819e4dc8_JC.exe
-
Size
455KB
-
Sample
231011-1p8z9see7s
-
MD5
70dffc95dc1f94ad8f908407819e4dc8
-
SHA1
5a97bf3c548a42b61aabc50814aca3e1de36c8b1
-
SHA256
8c0d42321d0e739b89aec2e48b6c31ec459895f9965bc7bc53c127ed0dbe89ac
-
SHA512
76040b30cfede6068ace9cad009cf9d175e6c1c6950ed5ae975e6e9f384a64fb8cca1140457262ed8ef8665096304d1cbe98c9ed4339af39e4b43af6032447cf
-
SSDEEP
6144:r/VW8rQ+dqof6VcVttGhZsXtvmqoI+CNLOnmIbCM2dWwh3gNUie2Jy+5vmSZGpVd:ZtaQt+ZsFeI+CSZbyKLe2JPFE
Behavioral task
behavioral1
Sample
70dffc95dc1f94ad8f908407819e4dc8_JC.exe
Resource
win7-20230831-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
70dffc95dc1f94ad8f908407819e4dc8_JC.exe
-
Size
455KB
-
MD5
70dffc95dc1f94ad8f908407819e4dc8
-
SHA1
5a97bf3c548a42b61aabc50814aca3e1de36c8b1
-
SHA256
8c0d42321d0e739b89aec2e48b6c31ec459895f9965bc7bc53c127ed0dbe89ac
-
SHA512
76040b30cfede6068ace9cad009cf9d175e6c1c6950ed5ae975e6e9f384a64fb8cca1140457262ed8ef8665096304d1cbe98c9ed4339af39e4b43af6032447cf
-
SSDEEP
6144:r/VW8rQ+dqof6VcVttGhZsXtvmqoI+CNLOnmIbCM2dWwh3gNUie2Jy+5vmSZGpVd:ZtaQt+ZsFeI+CSZbyKLe2JPFE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-