Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
29d5b4920a82e19663022125d2d531ac0f460ffa99d6e6e0351e920dd43e778c
-
Size
448KB
-
Sample
240418-yt1tcaeg61
-
MD5
abc7af471759c348bed8520bf15295ef
-
SHA1
08064f0d39b9422c5d7b119831ccedea872ccdab
-
SHA256
29d5b4920a82e19663022125d2d531ac0f460ffa99d6e6e0351e920dd43e778c
-
SHA512
ab1a4715c6cf1e8d2fd0b62c4d2d167ddd7de9f0bfb5bb735f11f8e4df767badfcfc1dbadb3bedecc651ec3b4dc26be202ad3425f959991a6271265a393e8818
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjdOS:oMpASIcWYx2U6hAJQnMh
Behavioral task
behavioral1
Sample
29d5b4920a82e19663022125d2d531ac0f460ffa99d6e6e0351e920dd43e778c.exe
Resource
win7-20240319-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
29d5b4920a82e19663022125d2d531ac0f460ffa99d6e6e0351e920dd43e778c
-
Size
448KB
-
MD5
abc7af471759c348bed8520bf15295ef
-
SHA1
08064f0d39b9422c5d7b119831ccedea872ccdab
-
SHA256
29d5b4920a82e19663022125d2d531ac0f460ffa99d6e6e0351e920dd43e778c
-
SHA512
ab1a4715c6cf1e8d2fd0b62c4d2d167ddd7de9f0bfb5bb735f11f8e4df767badfcfc1dbadb3bedecc651ec3b4dc26be202ad3425f959991a6271265a393e8818
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjdOS:oMpASIcWYx2U6hAJQnMh
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-