Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
680c2a47c832e1db286f3dec9c2afc07fd35e2a8eba0a6d26a25052cc55fb77eN
-
Size
329KB
-
Sample
241010-tybmssvejc
-
MD5
7b3bf7bfd2f0a2aebfa9fdcb9f086770
-
SHA1
07b2ba679d18619d522fa3be509f2c2e00b24789
-
SHA256
680c2a47c832e1db286f3dec9c2afc07fd35e2a8eba0a6d26a25052cc55fb77e
-
SHA512
b28c22a9a014a059d6fcadeefa97da1c318abacb6b52f85970661b049d5d09c3671b1ca22b9aab317bc337c62929cfc2be7cb86e4d7a237cab0b75d806705753
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYoY:vHW138/iXWlK885rKlGSekcj66ciu
Static task
static1
Behavioral task
behavioral1
Sample
680c2a47c832e1db286f3dec9c2afc07fd35e2a8eba0a6d26a25052cc55fb77eN.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
680c2a47c832e1db286f3dec9c2afc07fd35e2a8eba0a6d26a25052cc55fb77eN
-
Size
329KB
-
MD5
7b3bf7bfd2f0a2aebfa9fdcb9f086770
-
SHA1
07b2ba679d18619d522fa3be509f2c2e00b24789
-
SHA256
680c2a47c832e1db286f3dec9c2afc07fd35e2a8eba0a6d26a25052cc55fb77e
-
SHA512
b28c22a9a014a059d6fcadeefa97da1c318abacb6b52f85970661b049d5d09c3671b1ca22b9aab317bc337c62929cfc2be7cb86e4d7a237cab0b75d806705753
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYoY:vHW138/iXWlK885rKlGSekcj66ciu
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-