Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
easyMalicious2389fb6b489d.exe
-
Size
40KB
-
Sample
230704-vahlwahb7y
-
MD5
5871912d5f8a255737aee4003c7bd87e
-
SHA1
fa7a080b1ff86abfecdf361009d7d37cd2493d7f
-
SHA256
6f08ed8cb5db2a58e69ec020bee500e0dc57b03a7ea548c9c9827e9702a565d0
-
SHA512
855c98bee41a53a2261146a4602c95b45db458c9c958fb931a0a50fab9670aafe5678b25fdc546651ef5dac75476396b8f0027bd26880f6c936c0765cc3419fb
-
SSDEEP
768:KyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJBuq:9xqjQ+P04wsmJC0
Behavioral task
behavioral1
Sample
easyMalicious2389fb6b489d.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
easyMalicious2389fb6b489d.exe
Resource
win10v2004-20230703-en
Malware Config
Targets
-
-
Target
easyMalicious2389fb6b489d.exe
-
Size
40KB
-
MD5
5871912d5f8a255737aee4003c7bd87e
-
SHA1
fa7a080b1ff86abfecdf361009d7d37cd2493d7f
-
SHA256
6f08ed8cb5db2a58e69ec020bee500e0dc57b03a7ea548c9c9827e9702a565d0
-
SHA512
855c98bee41a53a2261146a4602c95b45db458c9c958fb931a0a50fab9670aafe5678b25fdc546651ef5dac75476396b8f0027bd26880f6c936c0765cc3419fb
-
SSDEEP
768:KyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJBuq:9xqjQ+P04wsmJC0
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Modifies system executable filetype association
-