Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
UPDATED SOA.exe
-
Size
1.1MB
-
Sample
230828-mns1rsab62
-
MD5
253b21547cc9cb67b21c30223c60cfeb
-
SHA1
2626ba70352d3a19cadbeac4e1810e08968a9c55
-
SHA256
83a4b6cd0fa89d77f39c1ac7e3ecf5260bd7bffa07ab30fc6c7ab17e87525e39
-
SHA512
2d6dc3ab97d8aec0a880f9d3e03ca25646e4a8be2b72590d70fea5094eec9f06f1a911e8c05249883050e5802846489bd29e7352160865376c2e916f1e80876e
-
SSDEEP
24576:cSnlCe9qhJe96OE8uz2xxz9/cQVb3sFEg9SkLO7Dlw+T9koak48:/lCe9qhJesONuyxbn7sFLsw+T9p
Static task
static1
Behavioral task
behavioral1
Sample
UPDATED SOA.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
UPDATED SOA.exe
Resource
win10v2004-20230703-en
Malware Config
Targets
-
-
Target
UPDATED SOA.exe
-
Size
1.1MB
-
MD5
253b21547cc9cb67b21c30223c60cfeb
-
SHA1
2626ba70352d3a19cadbeac4e1810e08968a9c55
-
SHA256
83a4b6cd0fa89d77f39c1ac7e3ecf5260bd7bffa07ab30fc6c7ab17e87525e39
-
SHA512
2d6dc3ab97d8aec0a880f9d3e03ca25646e4a8be2b72590d70fea5094eec9f06f1a911e8c05249883050e5802846489bd29e7352160865376c2e916f1e80876e
-
SSDEEP
24576:cSnlCe9qhJe96OE8uz2xxz9/cQVb3sFEg9SkLO7Dlw+T9koak48:/lCe9qhJesONuyxbn7sFLsw+T9p
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Loads dropped DLL
-
Modifies system executable filetype association
-
Suspicious use of SetThreadContext
-