Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.NEAS4c97d35f912457bb181e387e671bdc05exe_JC.exe

  • Size

    101KB

  • Sample

    231013-sry9vach88

  • MD5

    4c97d35f912457bb181e387e671bdc05

  • SHA1

    262f1705905c1e1720cbe6c1f280d49464c6a08b

  • SHA256

    e290f396731ee359d37122464f4454ffd91e792dfc9749dda728e22f2f146022

  • SHA512

    47582e279e9f20149e7cf24d1e8d66116f1be4ef6ed27757132c1d0af47bb12bba6cae13796f8a34e0d1f599cd9eca49d87b1c283562d413d5f04a43f0a0490e

  • SSDEEP

    3072:opyPX8s/FSLlrd6CD1e3L53/zrB3g3k8p4qI4/HQCC:hZILdZEFPBZs/HNC

Score
10/10

Malware Config

Targets

    • Target

      NEAS.NEAS4c97d35f912457bb181e387e671bdc05exe_JC.exe

    • Size

      101KB

    • MD5

      4c97d35f912457bb181e387e671bdc05

    • SHA1

      262f1705905c1e1720cbe6c1f280d49464c6a08b

    • SHA256

      e290f396731ee359d37122464f4454ffd91e792dfc9749dda728e22f2f146022

    • SHA512

      47582e279e9f20149e7cf24d1e8d66116f1be4ef6ed27757132c1d0af47bb12bba6cae13796f8a34e0d1f599cd9eca49d87b1c283562d413d5f04a43f0a0490e

    • SSDEEP

      3072:opyPX8s/FSLlrd6CD1e3L53/zrB3g3k8p4qI4/HQCC:hZILdZEFPBZs/HNC

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks