Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
97aab0a912875f65ae91d3d67e5b4541
-
Size
441KB
-
Sample
231222-qbtnbadfbp
-
MD5
97aab0a912875f65ae91d3d67e5b4541
-
SHA1
dff953da77d139e9f7ecd6292d548d1df0cf46cf
-
SHA256
43a6dbabf9d91478c9763b315004b2066d4f8dd539c223a0813cbba409253c96
-
SHA512
23c9033497f6337811e878f24b43a64f6e3065699d60d31b803b93796988ec186ecfe69c699b11da5322efe0e4f8da7cd5c4c198009db8149315f63f47e40714
-
SSDEEP
6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGMRJ2:rKf1PyKa2H3hOHOHz9JQ6zBGI
Behavioral task
behavioral1
Sample
97aab0a912875f65ae91d3d67e5b4541.exe
Resource
win7-20231215-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.165
218.54.31.226
Targets
-
-
Target
97aab0a912875f65ae91d3d67e5b4541
-
Size
441KB
-
MD5
97aab0a912875f65ae91d3d67e5b4541
-
SHA1
dff953da77d139e9f7ecd6292d548d1df0cf46cf
-
SHA256
43a6dbabf9d91478c9763b315004b2066d4f8dd539c223a0813cbba409253c96
-
SHA512
23c9033497f6337811e878f24b43a64f6e3065699d60d31b803b93796988ec186ecfe69c699b11da5322efe0e4f8da7cd5c4c198009db8149315f63f47e40714
-
SSDEEP
6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGMRJ2:rKf1PyKa2H3hOHOHz9JQ6zBGI
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-