Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fb3775cf3ffe36b9c5cfb9f37ad5e638
-
Size
415KB
-
Sample
240409-zhgf1aeb4w
-
MD5
fb3775cf3ffe36b9c5cfb9f37ad5e638
-
SHA1
fe8ce16de51789591531d2c30813329a49953326
-
SHA256
afd5947c53ec3fbfa05babc02f2a638c6b9a59d1303bd9802ad23584465d91eb
-
SHA512
ad3366cc580c7e6271747f004683a5d043dad0d57b62d83ca98ab37d985b37295510a02e5bae7ff60497f3d57419710b9a53555c0fd0e0fdea70084ef999fc6e
-
SSDEEP
6144:bzwArTEDSCs5wL0DKlpn/URBudL7qRBpkvfsModogZ/SvnDTH95r:bMmQDSCs5wo0e8L7qRbQUugennHX
Behavioral task
behavioral1
Sample
fb3775cf3ffe36b9c5cfb9f37ad5e638.exe
Resource
win7-20240221-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
fb3775cf3ffe36b9c5cfb9f37ad5e638
-
Size
415KB
-
MD5
fb3775cf3ffe36b9c5cfb9f37ad5e638
-
SHA1
fe8ce16de51789591531d2c30813329a49953326
-
SHA256
afd5947c53ec3fbfa05babc02f2a638c6b9a59d1303bd9802ad23584465d91eb
-
SHA512
ad3366cc580c7e6271747f004683a5d043dad0d57b62d83ca98ab37d985b37295510a02e5bae7ff60497f3d57419710b9a53555c0fd0e0fdea70084ef999fc6e
-
SSDEEP
6144:bzwArTEDSCs5wL0DKlpn/URBudL7qRBpkvfsModogZ/SvnDTH95r:bMmQDSCs5wo0e8L7qRbQUugennHX
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-