Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

401772ae1e...8d.exe

windows7-x64

10

401772ae1e...8d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    401772ae1eb988f55b89949a2590c9499edf192b6ec8969f1e7ff18751c6818d

  • Size

    1.7MB

  • Sample

    221129-jyvqkaea5y

  • MD5

    985212c812553ac86508c65e6c56d81c

  • SHA1

    3c6f0d2384a4d5d167e23ee5988409491a92ed5d

  • SHA256

    401772ae1eb988f55b89949a2590c9499edf192b6ec8969f1e7ff18751c6818d

  • SHA512

    ac066f904f1666f930b327bcff5ab3adc60ef23cab3ae5fd315fcef654c6d10d47b44a73f026792d93f82f67255d30f7e7d54738208c16b9ce0b8f84930a2784

  • SSDEEP

    24576:rqd57u9q281f9OVB2ZzvowJiMPml4gGnjHSZUu8R1:w576Vhw7ml4zj5R

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      401772ae1eb988f55b89949a2590c9499edf192b6ec8969f1e7ff18751c6818d

    • Size

      1.7MB

    • MD5

      985212c812553ac86508c65e6c56d81c

    • SHA1

      3c6f0d2384a4d5d167e23ee5988409491a92ed5d

    • SHA256

      401772ae1eb988f55b89949a2590c9499edf192b6ec8969f1e7ff18751c6818d

    • SHA512

      ac066f904f1666f930b327bcff5ab3adc60ef23cab3ae5fd315fcef654c6d10d47b44a73f026792d93f82f67255d30f7e7d54738208c16b9ce0b8f84930a2784

    • SSDEEP

      24576:rqd57u9q281f9OVB2ZzvowJiMPml4gGnjHSZUu8R1:w576Vhw7ml4zj5R

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta payload

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks