Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.1e4cc5fefacb6ae7d640fbbe43669f00_JC.exe
-
Size
29KB
-
Sample
231011-wh7readb6z
-
MD5
1e4cc5fefacb6ae7d640fbbe43669f00
-
SHA1
ba364afbab548f0057549e32cb45a10fec7d4131
-
SHA256
653c35ccd41efee6169c635289dbc2bc2285242ec13cf8908e71d187f328875d
-
SHA512
e5c02a1a0df0a49187f910efb905e5814ca6de56409c7455e3c44274586e5264ff345a60cc87fe0a04ed06c83d8a43fb647fb01d1b10337cfcf282952ff1cf29
-
SSDEEP
384:xiUGhG7/mdI2is9kNWKpm5YG/TsIOtLNLCBsC/XzRR:cUQqQp8y5jwI0LNMsuX
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1e4cc5fefacb6ae7d640fbbe43669f00_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.1e4cc5fefacb6ae7d640fbbe43669f00_JC.exe
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
NEAS.1e4cc5fefacb6ae7d640fbbe43669f00_JC.exe
-
Size
29KB
-
MD5
1e4cc5fefacb6ae7d640fbbe43669f00
-
SHA1
ba364afbab548f0057549e32cb45a10fec7d4131
-
SHA256
653c35ccd41efee6169c635289dbc2bc2285242ec13cf8908e71d187f328875d
-
SHA512
e5c02a1a0df0a49187f910efb905e5814ca6de56409c7455e3c44274586e5264ff345a60cc87fe0a04ed06c83d8a43fb647fb01d1b10337cfcf282952ff1cf29
-
SSDEEP
384:xiUGhG7/mdI2is9kNWKpm5YG/TsIOtLNLCBsC/XzRR:cUQqQp8y5jwI0LNMsuX
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-