Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4a8d0c692042fcace23a8b9461050ddd
-
Size
328KB
-
Sample
240409-2eh7jaeh63
-
MD5
4a8d0c692042fcace23a8b9461050ddd
-
SHA1
b9eb6d038650d33fe9553d4e692e25088113d91f
-
SHA256
d6d1d6fe4be85a2b54ca97dcb642c53011e5b507eeb13f5c27cfa3c2aa751103
-
SHA512
f51092c252afb5844b3e7ba4b98aeb7e329a7e05a63504a8e627d3ce2717e9edf73a5e8c218b28d11af5d32a1996e54512588688fa8ddbf29549ec656299f473
-
SSDEEP
6144:wObaeY8zPekKKH/hT8PVdkLHtA3nPER5oSHzZ4NyM:wOb/KKH/hT8PVdkJA3uoSir
Behavioral task
behavioral1
Sample
4a8d0c692042fcace23a8b9461050ddd.exe
Resource
win7-20240221-en
Malware Config
Extracted
urelas
121.88.5.184
121.88.5.183
218.54.30.235
218.54.28.139
Targets
-
-
Target
4a8d0c692042fcace23a8b9461050ddd
-
Size
328KB
-
MD5
4a8d0c692042fcace23a8b9461050ddd
-
SHA1
b9eb6d038650d33fe9553d4e692e25088113d91f
-
SHA256
d6d1d6fe4be85a2b54ca97dcb642c53011e5b507eeb13f5c27cfa3c2aa751103
-
SHA512
f51092c252afb5844b3e7ba4b98aeb7e329a7e05a63504a8e627d3ce2717e9edf73a5e8c218b28d11af5d32a1996e54512588688fa8ddbf29549ec656299f473
-
SSDEEP
6144:wObaeY8zPekKKH/hT8PVdkLHtA3nPER5oSHzZ4NyM:wOb/KKH/hT8PVdkJA3uoSir
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-