Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.eb9951f7014fbbc2ae11d946bd5a4260.exe

  • Size

    249KB

  • Sample

    231014-j874mshh4x

  • MD5

    eb9951f7014fbbc2ae11d946bd5a4260

  • SHA1

    5782b4afa2dcd9720e7ef6ab9831a6000b916f4d

  • SHA256

    2480499058392c3fba5801b4b33bc5f010237bbbc2819e8da318581185c2fa16

  • SHA512

    89a92f5357a01768608fade7a0c2cc13fe18c5eb1cb3edf769efc1316b8de69d459e1fafa9f651223af38be622aee8954fdd3a30b120c53a84bed17d67a46b5e

  • SSDEEP

    6144:h1OgDPdkBAFZWjadD4s5sWp70PTdFNN2g7+/:h1OgLdaO57MTfNN2i0

Malware Config

Targets

    • Target

      NEAS.eb9951f7014fbbc2ae11d946bd5a4260.exe

    • Size

      249KB

    • MD5

      eb9951f7014fbbc2ae11d946bd5a4260

    • SHA1

      5782b4afa2dcd9720e7ef6ab9831a6000b916f4d

    • SHA256

      2480499058392c3fba5801b4b33bc5f010237bbbc2819e8da318581185c2fa16

    • SHA512

      89a92f5357a01768608fade7a0c2cc13fe18c5eb1cb3edf769efc1316b8de69d459e1fafa9f651223af38be622aee8954fdd3a30b120c53a84bed17d67a46b5e

    • SSDEEP

      6144:h1OgDPdkBAFZWjadD4s5sWp70PTdFNN2g7+/:h1OgLdaO57MTfNN2i0

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks