Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
776ec9790a94bd2bd57bc4f6667cfc821b691e13e7be1a4110f86680a23c1d17N.exe
-
Size
334KB
-
Sample
241205-pjtslstraw
-
MD5
6880190130796f515d46f9f542a953e0
-
SHA1
9266e0bc63bc4647b39d3825c7c2a8977e7a7de4
-
SHA256
776ec9790a94bd2bd57bc4f6667cfc821b691e13e7be1a4110f86680a23c1d17
-
SHA512
37267d0c0055bf6cd85f94aa0176e9f188a573414cf640096443d6a845049bda69befdec162572bcff137fa50b58da7f60598a7ad89d9b1fed5af7e4f009733a
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYw:vHW138/iXWlK885rKlGSekcj66ciV
Static task
static1
Behavioral task
behavioral1
Sample
776ec9790a94bd2bd57bc4f6667cfc821b691e13e7be1a4110f86680a23c1d17N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
776ec9790a94bd2bd57bc4f6667cfc821b691e13e7be1a4110f86680a23c1d17N.exe
-
Size
334KB
-
MD5
6880190130796f515d46f9f542a953e0
-
SHA1
9266e0bc63bc4647b39d3825c7c2a8977e7a7de4
-
SHA256
776ec9790a94bd2bd57bc4f6667cfc821b691e13e7be1a4110f86680a23c1d17
-
SHA512
37267d0c0055bf6cd85f94aa0176e9f188a573414cf640096443d6a845049bda69befdec162572bcff137fa50b58da7f60598a7ad89d9b1fed5af7e4f009733a
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYw:vHW138/iXWlK885rKlGSekcj66ciV
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-