Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
da19e1cec5aa6bbd039dfb413ca66d162fcf612714e6ea35efe8126a9ad5056f
-
Size
514KB
-
Sample
241205-dt3byssjgq
-
MD5
91b0994aae31d7a21d910f3022501e9d
-
SHA1
53cc2876b04a7e80ef64f7c2cb8f28b4de652176
-
SHA256
da19e1cec5aa6bbd039dfb413ca66d162fcf612714e6ea35efe8126a9ad5056f
-
SHA512
57aa2a357a9483bed17eb5bda655fd9cec4f592a649867e1aea4d89b9e723ed4be2d0219c2750317454fc098ccb310b2e42ffec3bd19c2e17a121a90e50caa72
-
SSDEEP
12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKo1:3MUv2LAv9AQ1p4dKI
Behavioral task
behavioral1
Sample
da19e1cec5aa6bbd039dfb413ca66d162fcf612714e6ea35efe8126a9ad5056f.exe
Resource
win7-20240729-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
da19e1cec5aa6bbd039dfb413ca66d162fcf612714e6ea35efe8126a9ad5056f
-
Size
514KB
-
MD5
91b0994aae31d7a21d910f3022501e9d
-
SHA1
53cc2876b04a7e80ef64f7c2cb8f28b4de652176
-
SHA256
da19e1cec5aa6bbd039dfb413ca66d162fcf612714e6ea35efe8126a9ad5056f
-
SHA512
57aa2a357a9483bed17eb5bda655fd9cec4f592a649867e1aea4d89b9e723ed4be2d0219c2750317454fc098ccb310b2e42ffec3bd19c2e17a121a90e50caa72
-
SSDEEP
12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKo1:3MUv2LAv9AQ1p4dKI
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-