Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

fd9d171bcd...1b.exe

windows7-x64

10

fd9d171bcd...1b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd9d171bcdcc7750ca7cbdcb83c3210a0c17f67f8bf5050ff0c8b2298209251b

  • Size

    84KB

  • Sample

    221106-1heg3scfh5

  • MD5

    0f403373e7ea600c1af5a0ea93a0edd0

  • SHA1

    5900cbe589c6af13778e94431ae15058444dfcef

  • SHA256

    fd9d171bcdcc7750ca7cbdcb83c3210a0c17f67f8bf5050ff0c8b2298209251b

  • SHA512

    d9044bd74f142115a00ffb25d4be66f9389df9bd14c4f071a791ab20d052269c8dded29c36426d1152d88b40e5abd33532d4a6935be7cc136fbac99262f24eb5

  • SSDEEP

    1536:JxqjQ+P04wsmJCkA03k/zd2jrk12EmGWK:sr85CZd/zKa2EmLK

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      fd9d171bcdcc7750ca7cbdcb83c3210a0c17f67f8bf5050ff0c8b2298209251b

    • Size

      84KB

    • MD5

      0f403373e7ea600c1af5a0ea93a0edd0

    • SHA1

      5900cbe589c6af13778e94431ae15058444dfcef

    • SHA256

      fd9d171bcdcc7750ca7cbdcb83c3210a0c17f67f8bf5050ff0c8b2298209251b

    • SHA512

      d9044bd74f142115a00ffb25d4be66f9389df9bd14c4f071a791ab20d052269c8dded29c36426d1152d88b40e5abd33532d4a6935be7cc136fbac99262f24eb5

    • SSDEEP

      1536:JxqjQ+P04wsmJCkA03k/zd2jrk12EmGWK:sr85CZd/zKa2EmLK

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks