Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.b81a37af367b56e9105bf9d000175e20.exe

  • Size

    364KB

  • Sample

    231013-zdvstsee6x

  • MD5

    b81a37af367b56e9105bf9d000175e20

  • SHA1

    5af90489ddb9827e3824d190c78d4cf01ec5f572

  • SHA256

    8ace994370eb5ab0055605e49209ed80eb46bbfcf57f20b332bc684a99db62bc

  • SHA512

    629a12967a4d7056546ee1fd010efae93ca6d3c25dfa894213d6ad52bb21975b698fa7882acf8ed3e7ca743d20548b6b2dfbad52207507e1c1933ec971df80b6

  • SSDEEP

    6144:3RvYpSWzQIsFj5tT3sFVdj26PVBlqYsFj5tT3sF:BkSWTs15tLsLdjzBlZs15tLs

Score
10/10

Malware Config

Targets

    • Target

      NEAS.b81a37af367b56e9105bf9d000175e20.exe

    • Size

      364KB

    • MD5

      b81a37af367b56e9105bf9d000175e20

    • SHA1

      5af90489ddb9827e3824d190c78d4cf01ec5f572

    • SHA256

      8ace994370eb5ab0055605e49209ed80eb46bbfcf57f20b332bc684a99db62bc

    • SHA512

      629a12967a4d7056546ee1fd010efae93ca6d3c25dfa894213d6ad52bb21975b698fa7882acf8ed3e7ca743d20548b6b2dfbad52207507e1c1933ec971df80b6

    • SSDEEP

      6144:3RvYpSWzQIsFj5tT3sFVdj26PVBlqYsFj5tT3sF:BkSWTs15tLsLdjzBlZs15tLs

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks