Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.8bd4ccc2173cf85bc191a7f084363960_JC.exe
-
Size
176KB
-
Sample
231103-rj89eaee65
-
MD5
8bd4ccc2173cf85bc191a7f084363960
-
SHA1
900004717293acb7822fb304bc67fb3950139daf
-
SHA256
8ba61061e2d0eafdb65f9b48746b225b97a08aa57c01999e9f7bafb320bcdc0c
-
SHA512
d430eeffe104365c1598d8a8b728b187c0908908fcc12713c5c2417dfdb9883da95befedb5c987adef2412f69e00072e3b6433af70d31bca9da1289d00e88956
-
SSDEEP
1536:Jv+x0V7eqzdYntSfGx+nAL2PdIkDNEnLAE0UtQgNMy3mvTtdK0vu5zypEh/tQX:IyVnYntSzWxnLj0OQg0tcau5zypEhFQX
Behavioral task
behavioral1
Sample
NEAS.8bd4ccc2173cf85bc191a7f084363960_JC.exe
Resource
win7-20231023-en
Malware Config
Extracted
urelas
121.88.5.183
121.88.5.184
218.54.28.139
Targets
-
-
Target
NEAS.8bd4ccc2173cf85bc191a7f084363960_JC.exe
-
Size
176KB
-
MD5
8bd4ccc2173cf85bc191a7f084363960
-
SHA1
900004717293acb7822fb304bc67fb3950139daf
-
SHA256
8ba61061e2d0eafdb65f9b48746b225b97a08aa57c01999e9f7bafb320bcdc0c
-
SHA512
d430eeffe104365c1598d8a8b728b187c0908908fcc12713c5c2417dfdb9883da95befedb5c987adef2412f69e00072e3b6433af70d31bca9da1289d00e88956
-
SSDEEP
1536:Jv+x0V7eqzdYntSfGx+nAL2PdIkDNEnLAE0UtQgNMy3mvTtdK0vu5zypEh/tQX:IyVnYntSzWxnLj0OQg0tcau5zypEhFQX
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-