Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
155s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
13/10/2023, 20:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.921562e34ca2321f05be2c8d71bb9050.exe
Resource
win7-20230831-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.921562e34ca2321f05be2c8d71bb9050.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
NEAS.921562e34ca2321f05be2c8d71bb9050.exe
-
Size
158KB
-
MD5
921562e34ca2321f05be2c8d71bb9050
-
SHA1
b282fb1ec8757f2077674606f887a961f8306bf1
-
SHA256
4e3f0b824d2de29e7dd50f0f454bb566cdd29a73d99171e36934ad7efdd74cd3
-
SHA512
8be9e4efdd704bb423528da5f65f832739b37d976d4e358d16e513a8e0bde548a95dde9643d2a0a79696298a72707c70ed658b8b5e19ea038ded08b82dff12a2
-
SSDEEP
3072:SnEONz8IJQ74UCBrN1MnEONJnEONz8IJQ74UCBrN1qQHGjLk/9Cw2k4y8w2kRnVV:Qat+PwN4twNRf
Score
6/10
Malware Config
Signatures
-
Drops desktop.ini file(s) 4 IoCs
description ioc Process File created \??\c:\$Recycle.Bin\S-1-5-21-2890696111-2332180956-3312704074-1000\desktop.ini NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\$Recycle.Bin\S-1-5-21-2890696111-2332180956-3312704074-1000\desktop.ini NEAS.921562e34ca2321f05be2c8d71bb9050.exe File created \??\c:\Program Files\desktop.ini NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\desktop.ini NEAS.921562e34ca2321f05be2c8d71bb9050.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification \??\c:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.en-us.dll NEAS.921562e34ca2321f05be2c8d71bb9050.exe File created \??\c:\Program Files\Common Files\microsoft shared\ink\it-IT\TipRes.dll.mui NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ca.pak NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\db\lib\derbyLocale_ko_KR.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\jre\lib\accessibility.properties NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt.nl_ja_4.4.0.v20140623020002.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.services.nl_zh_4.4.0.v20140623020002.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.registry_3.5.400.v20140428-1507.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jface.text.nl_zh_4.4.0.v20140623020002.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File created \??\c:\Program Files\Common Files\microsoft shared\ink\he-IL\tipresx.dll.mui NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins.nl_zh_4.4.0.v20140623020002.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\core\core.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\update_tracking\org-netbeans-modules-sampler.xml NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jre1.8.0_66\bin\deploy.dll NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\7-Zip\Lang\hr.txt NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ko-kr.dll NEAS.921562e34ca2321f05be2c8d71bb9050.exe File created \??\c:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-dayi.xml NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\epl-v10.html NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-ui_ja.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-io_ja.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\7-Zip\Uninstall.exe NEAS.921562e34ca2321f05be2c8d71bb9050.exe File created \??\c:\Program Files\Common Files\System\msadc\it-IT\msaddsr.dll.mui NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.jetty.util_8.1.14.v20131031.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-application-views.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jre1.8.0_66\bin\sunec.dll NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Common Files\microsoft shared\ClickToRun\vccorlib140.dll NEAS.921562e34ca2321f05be2c8d71bb9050.exe File created \??\c:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main.xml NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.docs_5.5.0.165303.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.emf.common_2.10.1.v20140901-1043.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\core\locale\com-sun-tools-visualvm-modules-startup_ja.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jre1.8.0_66\lib\net.properties NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-stdio-l1-1-0.dll NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\7-Zip\Lang\fa.txt NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\jre\bin\nio.dll NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.apache.lucene.analysis_3.5.0.v20120725-1805.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.frameworkadmin.equinox_1.0.500.v20131211-1531.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jre1.8.0_66\bin\zip.dll NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jre1.8.0_66\lib\management\jmxremote.password.template NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\7-Zip\Lang\ms.txt NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\pt-PT.pak NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.core.databinding.beans.nl_ja_4.4.0.v20140623020002.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\core\locale\com-sun-tools-visualvm-modules-startup_zh_CN.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Microsoft Office\Office16\OSPP.HTM NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Microsoft Office\root\Document Themes 16\Retrospect.thmx NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Microsoft Office\root\Document Themes 16\Slice.thmx NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\7-Zip\Lang\kaa.txt NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Common Files\System\ado\msadox.dll NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\jre\lib\ext\jfxrt.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-netbeans-swing-outline_ja.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jre1.8.0_66\bin\JavaAccessBridge-64.dll NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jre1.8.0_66\lib\rt.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Common Files\microsoft shared\ClickToRun\SubsystemController.man NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\jre\bin\jp2ssv.dll NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\jre\bin\prism_sw.dll NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\feature.xml NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\ECLIPSE_.RSA NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\rarrow.gif NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\visualvm\platform\modules\locale\org-openide-util-enumerations_ja.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\106.0.5249.119.manifest NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui.zh_CN_5.5.0.165303.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe File opened for modification \??\c:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.core.commands_0.10.2.v20140424-2344.jar NEAS.921562e34ca2321f05be2c8d71bb9050.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
263KB
MD57803e9a71b9333c25a929a6238931d1f
SHA1ffb17ca4cc6d5cb674cf1597e0acf056a3f65115
SHA256cf7a717993f9b390c1d1f1101e8199e31277a414efa1e438fa5d8d5bc578b4bc
SHA512ec94ead389be4ddd113cabd48a825ed851dafdf2766d4a6349834e07cd865e8514845609e0e141dd05fdec1cf239f7a9c35c1c392d7557c25569775b116a6854