Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ad9a72ffd516fe8bc888115cf1beda8cac2c8f17d5a0a82351bad1ccf517cc43
-
Size
330KB
-
Sample
241020-bdw4ws1gkq
-
MD5
2dd959c6e1effb6abe46f94d0702b2f5
-
SHA1
77b2edad9d60e05a74840a598a7797e47c42a885
-
SHA256
ad9a72ffd516fe8bc888115cf1beda8cac2c8f17d5a0a82351bad1ccf517cc43
-
SHA512
ac666070e68302e8092b1a180f69ae71c808a75b99813e7c2c55d26bc7fc007ef7724ce616a8652565bf78c71011bac6f04b2b628a1f7a6d559ff5b9314ae1a7
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVN:vHW138/iXWlK885rKlGSekcj66ciEN
Static task
static1
Behavioral task
behavioral1
Sample
ad9a72ffd516fe8bc888115cf1beda8cac2c8f17d5a0a82351bad1ccf517cc43.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
ad9a72ffd516fe8bc888115cf1beda8cac2c8f17d5a0a82351bad1ccf517cc43
-
Size
330KB
-
MD5
2dd959c6e1effb6abe46f94d0702b2f5
-
SHA1
77b2edad9d60e05a74840a598a7797e47c42a885
-
SHA256
ad9a72ffd516fe8bc888115cf1beda8cac2c8f17d5a0a82351bad1ccf517cc43
-
SHA512
ac666070e68302e8092b1a180f69ae71c808a75b99813e7c2c55d26bc7fc007ef7724ce616a8652565bf78c71011bac6f04b2b628a1f7a6d559ff5b9314ae1a7
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVN:vHW138/iXWlK885rKlGSekcj66ciEN
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-