Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
95ee71927bce9ff4ae2a236329b7aa20N.exe
-
Size
6.5MB
-
Sample
240829-g9nqaazdpr
-
MD5
95ee71927bce9ff4ae2a236329b7aa20
-
SHA1
1056f0228501dd256dd55ff60ec7d21be0020432
-
SHA256
ce8db332fe75b98361a0dc3b7b9bfc5456df31a291d61db244169ac55dfc4537
-
SHA512
b15c5a253d131ce391a6ca30842394ff032a57c51410f937a11225373c3f19a8555c36169bb121be4110e2d2bead53be6d41bdd004b80b4278341b6d558e03cd
-
SSDEEP
98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVSH:i0LrA2kHKQHNk3og9unipQyOaOH
Static task
static1
Behavioral task
behavioral1
Sample
95ee71927bce9ff4ae2a236329b7aa20N.exe
Resource
win7-20240705-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
95ee71927bce9ff4ae2a236329b7aa20N.exe
-
Size
6.5MB
-
MD5
95ee71927bce9ff4ae2a236329b7aa20
-
SHA1
1056f0228501dd256dd55ff60ec7d21be0020432
-
SHA256
ce8db332fe75b98361a0dc3b7b9bfc5456df31a291d61db244169ac55dfc4537
-
SHA512
b15c5a253d131ce391a6ca30842394ff032a57c51410f937a11225373c3f19a8555c36169bb121be4110e2d2bead53be6d41bdd004b80b4278341b6d558e03cd
-
SSDEEP
98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVSH:i0LrA2kHKQHNk3og9unipQyOaOH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-