Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.05b365bd11f0f05463e7971ad9172340_JC.exe

  • Size

    37KB

  • Sample

    231016-pygrlaeg31

  • MD5

    05b365bd11f0f05463e7971ad9172340

  • SHA1

    dde8d92acf9e73cfa1857941c4bd42ea6bccffb0

  • SHA256

    e11056c3fcb9b4f2b56527286cc8c9a166c46518c65197895f8083fa38f8f43b

  • SHA512

    64d1d5122daa93341786df1190f2c2eb20a0780ba9d93fd02d754cafa1f57fe804b4167067887a09d4aabb9665d3f3364a792499286da90296c37592d2d1e04d

  • SSDEEP

    384:/opQWRIg8e+6U44d1XxfvAHbluRSbVL1+LIQ:/0hR6VXxfvAHbEPIQ

Score
7/10

Malware Config

Targets

    • Target

      NEAS.05b365bd11f0f05463e7971ad9172340_JC.exe

    • Size

      37KB

    • MD5

      05b365bd11f0f05463e7971ad9172340

    • SHA1

      dde8d92acf9e73cfa1857941c4bd42ea6bccffb0

    • SHA256

      e11056c3fcb9b4f2b56527286cc8c9a166c46518c65197895f8083fa38f8f43b

    • SHA512

      64d1d5122daa93341786df1190f2c2eb20a0780ba9d93fd02d754cafa1f57fe804b4167067887a09d4aabb9665d3f3364a792499286da90296c37592d2d1e04d

    • SSDEEP

      384:/opQWRIg8e+6U44d1XxfvAHbluRSbVL1+LIQ:/0hR6VXxfvAHbEPIQ

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks