Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.960a853009a4ca5b1363707f13512181_JC.exe
-
Size
174KB
-
Sample
231101-wzw18sdd37
-
MD5
960a853009a4ca5b1363707f13512181
-
SHA1
49f75ae83644fa8a2f091afcf7922e835caa5cc3
-
SHA256
690019240cab2c2a34a2da793bb384bd13ea2dceefc6608e74b36b2621c51507
-
SHA512
8cbf45c97aaca9b76f8f3e67bc8539f00ce3d5e92a5cb3e70bdd740092d0dd66802d99cc4b51f10b4a0df60d20d7aac795c65165d6c7e6a7025acd5656864b56
-
SSDEEP
1536:JP02aqzNYndSTa+B3Rt2fZt+RtTILSZpLIQaV3WvGtWX0gu5DqpwWLtxhl7pvUND:SuYndSW7gILCLIPtqVu5DqpxhzvUND
Behavioral task
behavioral1
Sample
NEAS.960a853009a4ca5b1363707f13512181_JC.exe
Resource
win7-20231023-en
Malware Config
Extracted
urelas
121.88.5.183
121.88.5.184
218.54.28.139
Targets
-
-
Target
NEAS.960a853009a4ca5b1363707f13512181_JC.exe
-
Size
174KB
-
MD5
960a853009a4ca5b1363707f13512181
-
SHA1
49f75ae83644fa8a2f091afcf7922e835caa5cc3
-
SHA256
690019240cab2c2a34a2da793bb384bd13ea2dceefc6608e74b36b2621c51507
-
SHA512
8cbf45c97aaca9b76f8f3e67bc8539f00ce3d5e92a5cb3e70bdd740092d0dd66802d99cc4b51f10b4a0df60d20d7aac795c65165d6c7e6a7025acd5656864b56
-
SSDEEP
1536:JP02aqzNYndSTa+B3Rt2fZt+RtTILSZpLIQaV3WvGtWX0gu5DqpwWLtxhl7pvUND:SuYndSW7gILCLIPtqVu5DqpxhzvUND
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-