Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.NEAS3d2b8c97962a6c98b7f733b59dcfb59aexe_JC.exe
-
Size
538KB
-
Sample
231013-spq6fsah8t
-
MD5
3d2b8c97962a6c98b7f733b59dcfb59a
-
SHA1
5aa7bad8eb7057c9c9eb4b663e42bcc52a2530ff
-
SHA256
586675c28b01911e75f8e53814ae1b0cc8e2f76e2d5936d3f353e6598a9f5f3f
-
SHA512
42edac3e8bd28197ab1c3cefe2cfdda23cdf73188a465f9ffbbf5a762db9efa453a3c1af2e041103238b3a721cafd42e0560e4e44d84f2044fc91c3578062d70
-
SSDEEP
3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAx7:dqDAwl0xPTMiR9JSSxPUKYGdodHi
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.NEAS3d2b8c97962a6c98b7f733b59dcfb59aexe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.NEAS3d2b8c97962a6c98b7f733b59dcfb59aexe_JC.exe
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
NEAS.NEAS3d2b8c97962a6c98b7f733b59dcfb59aexe_JC.exe
-
Size
538KB
-
MD5
3d2b8c97962a6c98b7f733b59dcfb59a
-
SHA1
5aa7bad8eb7057c9c9eb4b663e42bcc52a2530ff
-
SHA256
586675c28b01911e75f8e53814ae1b0cc8e2f76e2d5936d3f353e6598a9f5f3f
-
SHA512
42edac3e8bd28197ab1c3cefe2cfdda23cdf73188a465f9ffbbf5a762db9efa453a3c1af2e041103238b3a721cafd42e0560e4e44d84f2044fc91c3578062d70
-
SSDEEP
3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAx7:dqDAwl0xPTMiR9JSSxPUKYGdodHi
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-