Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4510d89b0202d10ef5278296812c1d41c78ee0036819b46b7597325c014ddaae
-
Size
334KB
-
Sample
221204-c3hhgahh73
-
MD5
03b58e0c6584c295ab78ca22112431e0
-
SHA1
d1d61b3d2f03a75fa425abd4652f5cc95e68ffcb
-
SHA256
4510d89b0202d10ef5278296812c1d41c78ee0036819b46b7597325c014ddaae
-
SHA512
a5ff5654e2c3947b3d27c84c03902f07b2ba3b5e9e1745d3ffdceb1d349848dd0c350db7ad1b6ab8ebcac401537570a651a78c1e8df71a31bb88426df2894da5
-
SSDEEP
6144:k9bFzdSc7HqVdLNLko2xyPmwQoSBJVc6/2eNvsKPdE:azEKHadpLgyP6oS9t2eNvseK
Behavioral task
behavioral1
Sample
4510d89b0202d10ef5278296812c1d41c78ee0036819b46b7597325c014ddaae.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
4510d89b0202d10ef5278296812c1d41c78ee0036819b46b7597325c014ddaae
-
Size
334KB
-
MD5
03b58e0c6584c295ab78ca22112431e0
-
SHA1
d1d61b3d2f03a75fa425abd4652f5cc95e68ffcb
-
SHA256
4510d89b0202d10ef5278296812c1d41c78ee0036819b46b7597325c014ddaae
-
SHA512
a5ff5654e2c3947b3d27c84c03902f07b2ba3b5e9e1745d3ffdceb1d349848dd0c350db7ad1b6ab8ebcac401537570a651a78c1e8df71a31bb88426df2894da5
-
SSDEEP
6144:k9bFzdSc7HqVdLNLko2xyPmwQoSBJVc6/2eNvsKPdE:azEKHadpLgyP6oS9t2eNvseK
-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-