Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4816f302177143676a2c415259b2b1ca889adf99a97b97a0b6ff18f1e221ffe9N
-
Size
330KB
-
Sample
241001-cvlj6azgmh
-
MD5
463f5610b951b6cca819ec598c1e5e90
-
SHA1
be4d199ce6592614e3964f6ba37da23a81281621
-
SHA256
4816f302177143676a2c415259b2b1ca889adf99a97b97a0b6ff18f1e221ffe9
-
SHA512
c341b274a03dfe726eead3aef688a47742c93985e0768562fac61e3d980ea8b951c5c694a348a67c7daba2a7400cbc68e33d30f7c3594299b1287f70bf568367
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY6:vHW138/iXWlK885rKlGSekcj66cib
Static task
static1
Behavioral task
behavioral1
Sample
4816f302177143676a2c415259b2b1ca889adf99a97b97a0b6ff18f1e221ffe9N.exe
Resource
win7-20240704-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
4816f302177143676a2c415259b2b1ca889adf99a97b97a0b6ff18f1e221ffe9N
-
Size
330KB
-
MD5
463f5610b951b6cca819ec598c1e5e90
-
SHA1
be4d199ce6592614e3964f6ba37da23a81281621
-
SHA256
4816f302177143676a2c415259b2b1ca889adf99a97b97a0b6ff18f1e221ffe9
-
SHA512
c341b274a03dfe726eead3aef688a47742c93985e0768562fac61e3d980ea8b951c5c694a348a67c7daba2a7400cbc68e33d30f7c3594299b1287f70bf568367
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY6:vHW138/iXWlK885rKlGSekcj66cib
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-