Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a0a7adf664292ada80f2729dc4eface86383bef0519b696f6f1c1b972ab94b45N
-
Size
89KB
-
Sample
241019-h224dawark
-
MD5
89cabdf181ab420194557fafe276e480
-
SHA1
4ac6d8510f389cc7c9bee9a588183b6180042610
-
SHA256
a0a7adf664292ada80f2729dc4eface86383bef0519b696f6f1c1b972ab94b45
-
SHA512
fabf69000eeb7f34cae941a7a3f467042d7c89cb6aa6b8a03c296d14518c1a7645d5e8f3165371264edc6fe0ab6eba94c9d0c6c6d82f7ce8d8ef37d6ebda768d
-
SSDEEP
1536:Ywhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3Mz:YqV9MziU4piRun7C3CP3Mz
Static task
static1
Behavioral task
behavioral1
Sample
a0a7adf664292ada80f2729dc4eface86383bef0519b696f6f1c1b972ab94b45N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.209
112.175.88.207
Targets
-
-
Target
a0a7adf664292ada80f2729dc4eface86383bef0519b696f6f1c1b972ab94b45N
-
Size
89KB
-
MD5
89cabdf181ab420194557fafe276e480
-
SHA1
4ac6d8510f389cc7c9bee9a588183b6180042610
-
SHA256
a0a7adf664292ada80f2729dc4eface86383bef0519b696f6f1c1b972ab94b45
-
SHA512
fabf69000eeb7f34cae941a7a3f467042d7c89cb6aa6b8a03c296d14518c1a7645d5e8f3165371264edc6fe0ab6eba94c9d0c6c6d82f7ce8d8ef37d6ebda768d
-
SSDEEP
1536:Ywhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3Mz:YqV9MziU4piRun7C3CP3Mz
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-