Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
10c15bdd8252bf8434f426df7f6460658e55d5f52b5c2e98f11d764113c220dd
-
Size
333KB
-
Sample
241019-w8h6qs1eke
-
MD5
81fb5c594e507ec60907d87eb01ba90f
-
SHA1
74bef14e571f66d549433d9258ac58a0e1519446
-
SHA256
10c15bdd8252bf8434f426df7f6460658e55d5f52b5c2e98f11d764113c220dd
-
SHA512
ea4c3b96f7aa361d66bde76aac090e5db4d57e15543f139ad33282d753fb4784ca6e850dcb4ac7083a78c4116310ca48647f8bf25c2d1f7e593a4e46215b4b68
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYPUz:vHW138/iXWlK885rKlGSekcj66ciBz
Static task
static1
Behavioral task
behavioral1
Sample
10c15bdd8252bf8434f426df7f6460658e55d5f52b5c2e98f11d764113c220dd.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
10c15bdd8252bf8434f426df7f6460658e55d5f52b5c2e98f11d764113c220dd
-
Size
333KB
-
MD5
81fb5c594e507ec60907d87eb01ba90f
-
SHA1
74bef14e571f66d549433d9258ac58a0e1519446
-
SHA256
10c15bdd8252bf8434f426df7f6460658e55d5f52b5c2e98f11d764113c220dd
-
SHA512
ea4c3b96f7aa361d66bde76aac090e5db4d57e15543f139ad33282d753fb4784ca6e850dcb4ac7083a78c4116310ca48647f8bf25c2d1f7e593a4e46215b4b68
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYPUz:vHW138/iXWlK885rKlGSekcj66ciBz
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-