Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
01ae502f888424cdc5d5066e06043e187fbc928e7edb610cd6b1b034908f72c5
-
Size
420KB
-
Sample
240313-vnw2escd43
-
MD5
3477f317276bf2d4ed1a92ece69b7c18
-
SHA1
87baec845ee28b294a49dc3368de06c1a63f524f
-
SHA256
01ae502f888424cdc5d5066e06043e187fbc928e7edb610cd6b1b034908f72c5
-
SHA512
cb5111df85eec1cd0fee5c77ebc5a09cecff07bcef19c22ae0d5abf918b8a835e68fa9faaee5a0e8c93bc38c027ac660d84b37e78a76490630e9ea0474c866cb
-
SSDEEP
6144:UzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInODGY:uU7M5ijWh0XOW4sEfeOn
Behavioral task
behavioral1
Sample
01ae502f888424cdc5d5066e06043e187fbc928e7edb610cd6b1b034908f72c5.exe
Resource
win7-20240221-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
01ae502f888424cdc5d5066e06043e187fbc928e7edb610cd6b1b034908f72c5
-
Size
420KB
-
MD5
3477f317276bf2d4ed1a92ece69b7c18
-
SHA1
87baec845ee28b294a49dc3368de06c1a63f524f
-
SHA256
01ae502f888424cdc5d5066e06043e187fbc928e7edb610cd6b1b034908f72c5
-
SHA512
cb5111df85eec1cd0fee5c77ebc5a09cecff07bcef19c22ae0d5abf918b8a835e68fa9faaee5a0e8c93bc38c027ac660d84b37e78a76490630e9ea0474c866cb
-
SSDEEP
6144:UzU7blKaP2iCWhWapKRaRXOkN4Swel6f3IsInODGY:uU7M5ijWh0XOW4sEfeOn
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-