Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.b55966e6750ef28a71ff0fe61ef8ce10.exe

  • Size

    465KB

  • Sample

    231014-xvag4sfb5z

  • MD5

    b55966e6750ef28a71ff0fe61ef8ce10

  • SHA1

    6383718a1962d91f5a720e6463fc4695ce4c624d

  • SHA256

    2a56ec133e57bbcdb723163cc46ce827f8a7f510de57a32c4be13911af024090

  • SHA512

    957474ef7a23ae8912672ead288e34286ec1301693d51b748c89e04232f67b2c4722de2fb6bc6470bed4014ee9da91c3220ec36fedf0cd034d6b4fb2a5ce6cf3

  • SSDEEP

    6144:V+5zxvPWCOMwZu/NR5frdQt383PQ///NR5fKr2n0MO3LPlkUCmVs5bPQ///NR5f6:V2vPWvM//Nmr/Ng1/NSf

Score
10/10

Malware Config

Targets

    • Target

      NEAS.b55966e6750ef28a71ff0fe61ef8ce10.exe

    • Size

      465KB

    • MD5

      b55966e6750ef28a71ff0fe61ef8ce10

    • SHA1

      6383718a1962d91f5a720e6463fc4695ce4c624d

    • SHA256

      2a56ec133e57bbcdb723163cc46ce827f8a7f510de57a32c4be13911af024090

    • SHA512

      957474ef7a23ae8912672ead288e34286ec1301693d51b748c89e04232f67b2c4722de2fb6bc6470bed4014ee9da91c3220ec36fedf0cd034d6b4fb2a5ce6cf3

    • SSDEEP

      6144:V+5zxvPWCOMwZu/NR5frdQt383PQ///NR5fKr2n0MO3LPlkUCmVs5bPQ///NR5f6:V2vPWvM//Nmr/Ng1/NSf

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks