Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1e805c0b8a34c6295ec6e7d02c0f0539
-
Size
342KB
-
Sample
240410-ge6ydaec34
-
MD5
1e805c0b8a34c6295ec6e7d02c0f0539
-
SHA1
79ab51cb5f5b2b4141eb1a3ec88ee45aca06d027
-
SHA256
c696b1ba3409aa799769815a4bcc1da27e52e80b8fc2731d6e1713ff52be9160
-
SHA512
38a508d1100e91f4845b6933dfc432d4c8ef658da1d2bc817cc7dfb3e4e17c4386fb4685e8a3ffb4cc6a312853b81ee49be8c97e0758ab68aabd445f286dadea
-
SSDEEP
6144:Nd7rpL43btmQ58Z27zw39gY2FeZhrL8Jt:X7dL4AZ0U9gY2Fhz
Behavioral task
behavioral1
Sample
1e805c0b8a34c6295ec6e7d02c0f0539.exe
Resource
win7-20240221-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
1e805c0b8a34c6295ec6e7d02c0f0539
-
Size
342KB
-
MD5
1e805c0b8a34c6295ec6e7d02c0f0539
-
SHA1
79ab51cb5f5b2b4141eb1a3ec88ee45aca06d027
-
SHA256
c696b1ba3409aa799769815a4bcc1da27e52e80b8fc2731d6e1713ff52be9160
-
SHA512
38a508d1100e91f4845b6933dfc432d4c8ef658da1d2bc817cc7dfb3e4e17c4386fb4685e8a3ffb4cc6a312853b81ee49be8c97e0758ab68aabd445f286dadea
-
SSDEEP
6144:Nd7rpL43btmQ58Z27zw39gY2FeZhrL8Jt:X7dL4AZ0U9gY2Fhz
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-