Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d33939167cb7913cff8dc6fec4c3f430843cde388e960341abfa16f18ce5be3aN
-
Size
77KB
-
Sample
241019-gxhnha1emf
-
MD5
bca760b18a6a289ac9c7472b239f48c0
-
SHA1
b0ad35fb2654e68f68fda67340564dcfe5fdae4d
-
SHA256
d33939167cb7913cff8dc6fec4c3f430843cde388e960341abfa16f18ce5be3a
-
SHA512
63b7b58d5d3eecfad4313ed53ed1c1122b9b21ed9ae06efab6558dba59145228bc0582e7cadc1f74c67d0636e670736519479bebe54cc0507f0247737457a3f6
-
SSDEEP
768:xZU9HZe4JZxPKAgmmE2jmXwTcxlhshya4qCIDWObp2EfoiSCMy6MuHg/wrYaFRdo:xce4ZKAvTwTcshJDzo9LHyUYmdGT/TC+
Static task
static1
Behavioral task
behavioral1
Sample
d33939167cb7913cff8dc6fec4c3f430843cde388e960341abfa16f18ce5be3aN.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
d33939167cb7913cff8dc6fec4c3f430843cde388e960341abfa16f18ce5be3aN
-
Size
77KB
-
MD5
bca760b18a6a289ac9c7472b239f48c0
-
SHA1
b0ad35fb2654e68f68fda67340564dcfe5fdae4d
-
SHA256
d33939167cb7913cff8dc6fec4c3f430843cde388e960341abfa16f18ce5be3a
-
SHA512
63b7b58d5d3eecfad4313ed53ed1c1122b9b21ed9ae06efab6558dba59145228bc0582e7cadc1f74c67d0636e670736519479bebe54cc0507f0247737457a3f6
-
SSDEEP
768:xZU9HZe4JZxPKAgmmE2jmXwTcxlhshya4qCIDWObp2EfoiSCMy6MuHg/wrYaFRdo:xce4ZKAvTwTcshJDzo9LHyUYmdGT/TC+
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-