Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
299aba363caef390fbc4bd35f09718dd
-
Size
401KB
-
Sample
231231-fxx8hsbedq
-
MD5
299aba363caef390fbc4bd35f09718dd
-
SHA1
86cc9f5714875325e3f582176cf50e1d2b6887ba
-
SHA256
c9a7fbc74f14fd0561ba21366dbf3f0b053bc65bc078622c61b2881cadbc47e9
-
SHA512
7071f458001f56b80bdfcd4ff5ed3a036d48f7ce26f5b5cc9aecb8b45fb1b3d112c94e345682e8f250a8d97529bae56e3227b5786f57a065e26ff1cae9d60272
-
SSDEEP
6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohJh:8IfBoDWoyFblU6hAJQnOTh
Behavioral task
behavioral1
Sample
299aba363caef390fbc4bd35f09718dd.exe
Resource
win7-20231215-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
299aba363caef390fbc4bd35f09718dd
-
Size
401KB
-
MD5
299aba363caef390fbc4bd35f09718dd
-
SHA1
86cc9f5714875325e3f582176cf50e1d2b6887ba
-
SHA256
c9a7fbc74f14fd0561ba21366dbf3f0b053bc65bc078622c61b2881cadbc47e9
-
SHA512
7071f458001f56b80bdfcd4ff5ed3a036d48f7ce26f5b5cc9aecb8b45fb1b3d112c94e345682e8f250a8d97529bae56e3227b5786f57a065e26ff1cae9d60272
-
SSDEEP
6144:85SXvBoDWoyLYyzbkPC4DYM6SB6v+qLnAzYmhwrxcvkzmSBrohJh:8IfBoDWoyFblU6hAJQnOTh
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-