Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.5d1032af44bb9577d5fa9b9aa6ebe310.exe

  • Size

    12KB

  • Sample

    231013-y67seshh7y

  • MD5

    5d1032af44bb9577d5fa9b9aa6ebe310

  • SHA1

    da14d69875cd52a09cc2b15e78c8573b7523d2d2

  • SHA256

    029ddcded7006f27c62a28a3c6c534deae30c57702aadbe021d5c21a4435a259

  • SHA512

    c7d0bed666a5609991b3926aa537180982db9f211f4e9bb1f1c1d96c127fb3271def99321621660b2fe621634c93e8fcf3993601bda9ab6847fde8f9d20eaf00

  • SSDEEP

    384:TL7li/2zuq2DcEQvdhcJKLTp/NK9xaEg:3mM/Q9cEg

Score
7/10

Malware Config

Targets

    • Target

      NEAS.5d1032af44bb9577d5fa9b9aa6ebe310.exe

    • Size

      12KB

    • MD5

      5d1032af44bb9577d5fa9b9aa6ebe310

    • SHA1

      da14d69875cd52a09cc2b15e78c8573b7523d2d2

    • SHA256

      029ddcded7006f27c62a28a3c6c534deae30c57702aadbe021d5c21a4435a259

    • SHA512

      c7d0bed666a5609991b3926aa537180982db9f211f4e9bb1f1c1d96c127fb3271def99321621660b2fe621634c93e8fcf3993601bda9ab6847fde8f9d20eaf00

    • SSDEEP

      384:TL7li/2zuq2DcEQvdhcJKLTp/NK9xaEg:3mM/Q9cEg

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks