Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.40f07bdfb74e61fe7d7973bcd4167ffefcff2f8ba2ed6f82e9fcb5a295aaf113exe_JC.exe

  • Size

    32KB

  • Sample

    231008-r1fnesdb4s

  • MD5

    3947a0556c4159f49b9a7f9d23e2b4f5

  • SHA1

    3ee1ee149ba1d4eaa8c638334d2b3233fe5ee2b5

  • SHA256

    40f07bdfb74e61fe7d7973bcd4167ffefcff2f8ba2ed6f82e9fcb5a295aaf113

  • SHA512

    c777ef5d896ac77c96c93e3f3ae0d9db1e990e0ace3bd0ae8c3404315fece1d36ee54c3ccd0dd1530dffab37b976601c828318d08ad4f0f20baadf7a8e5957d4

  • SSDEEP

    384:L0bUe5XB4e0XFOZzw0Q0mS03AWTxtTUFQqzFx4ObbV:oT9BucC55dEbV

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7NC

Botnet

NYAN CAT

C2

1.tcp.sa.ngrok.io:21422

Mutex

375c01c17d154679

Attributes
  • reg_key

    375c01c17d154679

  • splitter

    @!#&^%$

Targets

    • Target

      NEAS.40f07bdfb74e61fe7d7973bcd4167ffefcff2f8ba2ed6f82e9fcb5a295aaf113exe_JC.exe

    • Size

      32KB

    • MD5

      3947a0556c4159f49b9a7f9d23e2b4f5

    • SHA1

      3ee1ee149ba1d4eaa8c638334d2b3233fe5ee2b5

    • SHA256

      40f07bdfb74e61fe7d7973bcd4167ffefcff2f8ba2ed6f82e9fcb5a295aaf113

    • SHA512

      c777ef5d896ac77c96c93e3f3ae0d9db1e990e0ace3bd0ae8c3404315fece1d36ee54c3ccd0dd1530dffab37b976601c828318d08ad4f0f20baadf7a8e5957d4

    • SSDEEP

      384:L0bUe5XB4e0XFOZzw0Q0mS03AWTxtTUFQqzFx4ObbV:oT9BucC55dEbV

    Score
    6/10
    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks