Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.NEASc402685dc7d5b1fa37cc296c0da547bfe874d3d00600831f0689a4f785ee57a5unknownunknown_JC.unknown

  • Size

    69KB

  • Sample

    231016-q2s5gafh7t

  • MD5

    1af10be1ac0841b6f844154543d851d5

  • SHA1

    ed015b49e928c42e7f3c21743e5dd74f310f633d

  • SHA256

    c402685dc7d5b1fa37cc296c0da547bfe874d3d00600831f0689a4f785ee57a5

  • SHA512

    28807eaeeebcd480d7a1294f0644acfbae7e45c088c6d24d72fb7e025ecfc4eac9bd5dc775de8cec2c11335b54b744acc6e36420f136cd4df181d2161bf4c5ab

  • SSDEEP

    768:zjjjjjjjjjjjjjjjjjjjjjjjsjjjjjjjjjjjRE7Lk+AjjjjjjjjjjjSjjjjjjjjf:nnk+V

Score
8/10

Malware Config

Targets

    • Target

      NEAS.NEASc402685dc7d5b1fa37cc296c0da547bfe874d3d00600831f0689a4f785ee57a5unknownunknown_JC.unknown

    • Size

      69KB

    • MD5

      1af10be1ac0841b6f844154543d851d5

    • SHA1

      ed015b49e928c42e7f3c21743e5dd74f310f633d

    • SHA256

      c402685dc7d5b1fa37cc296c0da547bfe874d3d00600831f0689a4f785ee57a5

    • SHA512

      28807eaeeebcd480d7a1294f0644acfbae7e45c088c6d24d72fb7e025ecfc4eac9bd5dc775de8cec2c11335b54b744acc6e36420f136cd4df181d2161bf4c5ab

    • SSDEEP

      768:zjjjjjjjjjjjjjjjjjjjjjjjsjjjjjjjjjjjRE7Lk+AjjjjjjjjjjjSjjjjjjjjf:nnk+V

    Score
    8/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks