Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.43356128735747b472d98211f980d57a.exe
-
Size
124KB
-
Sample
231117-tmbhnaag47
-
MD5
43356128735747b472d98211f980d57a
-
SHA1
ead1956ef510f9ecd8d388b03a518af6de776a5f
-
SHA256
831a3e29e0a1e5f06c60d956c5cac3d32dfb86d82c5ffa8cf1240e960c64855a
-
SHA512
7905d04d93c6f57a8fd2f570bb4a8bad26627f98c6330d7e038f2309d00a90a795da9acb57a0db06281ec8273cf7e6eb9d4a8d0b67afc7f24e630132085dcb15
-
SSDEEP
1536:3C+ltNKIxyDjxxNA6vOOZsBLD/qMJEAhHmRYHE7mqfm0yn:3C+ltUIs9pO9/jj8YKmF
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.43356128735747b472d98211f980d57a.exe
Resource
win7-20231020-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.207
Targets
-
-
Target
NEAS.43356128735747b472d98211f980d57a.exe
-
Size
124KB
-
MD5
43356128735747b472d98211f980d57a
-
SHA1
ead1956ef510f9ecd8d388b03a518af6de776a5f
-
SHA256
831a3e29e0a1e5f06c60d956c5cac3d32dfb86d82c5ffa8cf1240e960c64855a
-
SHA512
7905d04d93c6f57a8fd2f570bb4a8bad26627f98c6330d7e038f2309d00a90a795da9acb57a0db06281ec8273cf7e6eb9d4a8d0b67afc7f24e630132085dcb15
-
SSDEEP
1536:3C+ltNKIxyDjxxNA6vOOZsBLD/qMJEAhHmRYHE7mqfm0yn:3C+ltUIs9pO9/jj8YKmF
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-