Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

NEAS.b0b6e...JC.exe

windows7-x64

7

NEAS.b0b6e...JC.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.b0b6edb20b72acd92b63d8fe04d56cab_JC.exe

  • Size

    289KB

  • Sample

    231010-yaj2gsac89

  • MD5

    b0b6edb20b72acd92b63d8fe04d56cab

  • SHA1

    af933fcbaa1e7f5a87f122214f3e589bea1907b0

  • SHA256

    475baa415b5eb059891d87c2f807c046dd64190404b624519028aac70763029e

  • SHA512

    20c6f802266808a30e6e6271dc4daf84c0e09705d7d47a840a2f8ffc8314330dbdbb4625b62d0555a44068b0fa5f69b5901bfa3a4396c7cfadc65b9a40d76282

  • SSDEEP

    3072:JihgCYCxVOuzCyk5mvQBohjiBGwOzI96cQkP3K4pLthECQT68VMJLaQljVvzUpz:JzbCxV5tvQ2hjiBGL1kECzJLaQVbU5

Score
7/10

Malware Config

Targets

    • Target

      NEAS.b0b6edb20b72acd92b63d8fe04d56cab_JC.exe

    • Size

      289KB

    • MD5

      b0b6edb20b72acd92b63d8fe04d56cab

    • SHA1

      af933fcbaa1e7f5a87f122214f3e589bea1907b0

    • SHA256

      475baa415b5eb059891d87c2f807c046dd64190404b624519028aac70763029e

    • SHA512

      20c6f802266808a30e6e6271dc4daf84c0e09705d7d47a840a2f8ffc8314330dbdbb4625b62d0555a44068b0fa5f69b5901bfa3a4396c7cfadc65b9a40d76282

    • SSDEEP

      3072:JihgCYCxVOuzCyk5mvQBohjiBGwOzI96cQkP3K4pLthECQT68VMJLaQljVvzUpz:JzbCxV5tvQ2hjiBGL1kECzJLaQVbU5

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks