Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.6fbb9f08304493011c5f575281a17200.exe
-
Size
77KB
-
Sample
231105-z2dt8aee56
-
MD5
6fbb9f08304493011c5f575281a17200
-
SHA1
bcb7cdfd873dec0827f9436cfeb9e21e8af69468
-
SHA256
b495a933d917284d9f35f1a013d9717c20a55bcea142ae03de6790071f0ea3d4
-
SHA512
92d59a578e3846c8db686ab07f76c575916fddbe978428b51d8c199b271a7c289a703d1b1a0ed3e94b6316c75fc50b57c71eb0d788fa55ef6aa10dcb978395b4
-
SSDEEP
1536:zxKyhnAUfUiZR9G84qk+Be/HZ17hmZp2t:zLCEZTGx518E
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.6fbb9f08304493011c5f575281a17200.exe
Resource
win7-20231020-en
Malware Config
Extracted
urelas
218.54.28.139
121.88.5.183
Targets
-
-
Target
NEAS.6fbb9f08304493011c5f575281a17200.exe
-
Size
77KB
-
MD5
6fbb9f08304493011c5f575281a17200
-
SHA1
bcb7cdfd873dec0827f9436cfeb9e21e8af69468
-
SHA256
b495a933d917284d9f35f1a013d9717c20a55bcea142ae03de6790071f0ea3d4
-
SHA512
92d59a578e3846c8db686ab07f76c575916fddbe978428b51d8c199b271a7c289a703d1b1a0ed3e94b6316c75fc50b57c71eb0d788fa55ef6aa10dcb978395b4
-
SSDEEP
1536:zxKyhnAUfUiZR9G84qk+Be/HZ17hmZp2t:zLCEZTGx518E
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-