Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
31a194cac2e9de7a6007ed9ec667f810N.exe
-
Size
269KB
-
Sample
240712-eyrxfsybqk
-
MD5
31a194cac2e9de7a6007ed9ec667f810
-
SHA1
4c32b1079830ec850a9fc5772b62f7ec7e3f3eef
-
SHA256
a0d51145bd3f6620032b432be3cdb9a4bd3a2b889c01d101c9a53d8c46c6b4e4
-
SHA512
26f488523aecfb4d26ea71f57a7b8fa155baf4e6d37c81a8f0ad9c810ed83be542effd26fda17e75c191afead0c19c4571614281ddd53e5224d05c447efc2974
-
SSDEEP
6144:C/l5MBlczZhOHP0DQIpUtJndnUvBJGxhw5UJp8wB:C/EwthXN0ZdUvBJFUN
Static task
static1
Behavioral task
behavioral1
Sample
31a194cac2e9de7a6007ed9ec667f810N.exe
Resource
win7-20240705-en
Malware Config
Extracted
gcleaner
185.172.128.90
77.105.160.30
185.172.128.69
Targets
-
-
Target
31a194cac2e9de7a6007ed9ec667f810N.exe
-
Size
269KB
-
MD5
31a194cac2e9de7a6007ed9ec667f810
-
SHA1
4c32b1079830ec850a9fc5772b62f7ec7e3f3eef
-
SHA256
a0d51145bd3f6620032b432be3cdb9a4bd3a2b889c01d101c9a53d8c46c6b4e4
-
SHA512
26f488523aecfb4d26ea71f57a7b8fa155baf4e6d37c81a8f0ad9c810ed83be542effd26fda17e75c191afead0c19c4571614281ddd53e5224d05c447efc2974
-
SSDEEP
6144:C/l5MBlczZhOHP0DQIpUtJndnUvBJGxhw5UJp8wB:C/EwthXN0ZdUvBJFUN
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-