Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
6be7e959d0db1898e2f487f927a8da7f26807c8a8db331031ee18e87ebd99c61
-
Size
346KB
-
Sample
221011-2ra2pahhb9
-
MD5
7b596ffec2d358608f0b9a5cd8558940
-
SHA1
9d9c844c04339905591447ad06642efe7d229c00
-
SHA256
6be7e959d0db1898e2f487f927a8da7f26807c8a8db331031ee18e87ebd99c61
-
SHA512
d7242d0182cd5ccbefd66cd7ca5861d17c97f5cf765c73ba2e6134b53411c2d111e2cca59a2c9d7976c859712edba0e6fac13d7b36c0ecb86503f45241fcd90c
-
SSDEEP
6144:k9c/hU0YRwi0LkD4ZFpTAikzo43sG74nKIXvvTNK+tspz2/na4y://WNV0wicNzV8GMKI/8+ts9Ona7
Behavioral task
behavioral1
Sample
6be7e959d0db1898e2f487f927a8da7f26807c8a8db331031ee18e87ebd99c61.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6be7e959d0db1898e2f487f927a8da7f26807c8a8db331031ee18e87ebd99c61.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
6be7e959d0db1898e2f487f927a8da7f26807c8a8db331031ee18e87ebd99c61
-
Size
346KB
-
MD5
7b596ffec2d358608f0b9a5cd8558940
-
SHA1
9d9c844c04339905591447ad06642efe7d229c00
-
SHA256
6be7e959d0db1898e2f487f927a8da7f26807c8a8db331031ee18e87ebd99c61
-
SHA512
d7242d0182cd5ccbefd66cd7ca5861d17c97f5cf765c73ba2e6134b53411c2d111e2cca59a2c9d7976c859712edba0e6fac13d7b36c0ecb86503f45241fcd90c
-
SSDEEP
6144:k9c/hU0YRwi0LkD4ZFpTAikzo43sG74nKIXvvTNK+tspz2/na4y://WNV0wicNzV8GMKI/8+ts9Ona7
Score10/10-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-