Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.NEASefb039da535a5e79a61283cc5152b3a4exe_JC.exe

  • Size

    516KB

  • Sample

    231016-rvda4sgg7y

  • MD5

    efb039da535a5e79a61283cc5152b3a4

  • SHA1

    0eff6cc49cc10eea33da1f1b278703558f837ceb

  • SHA256

    4a87871af5e2819b98042b98a466499c3528f3b7b4ba6a29977e85ccb0929ae0

  • SHA512

    159ed6fa9a9815edbf726701b3a2855afa2e53ead7e4a68d23de9d352fdb0eed5fff2b629922a352214632328e1fb66668351c8189e3a3d9fb99fed80bb20fe6

  • SSDEEP

    3072:oCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxp:oqDAwl0xPTMiR9JSSxPUKYGdodHU

Score
7/10

Malware Config

Targets

    • Target

      NEAS.NEASefb039da535a5e79a61283cc5152b3a4exe_JC.exe

    • Size

      516KB

    • MD5

      efb039da535a5e79a61283cc5152b3a4

    • SHA1

      0eff6cc49cc10eea33da1f1b278703558f837ceb

    • SHA256

      4a87871af5e2819b98042b98a466499c3528f3b7b4ba6a29977e85ccb0929ae0

    • SHA512

      159ed6fa9a9815edbf726701b3a2855afa2e53ead7e4a68d23de9d352fdb0eed5fff2b629922a352214632328e1fb66668351c8189e3a3d9fb99fed80bb20fe6

    • SSDEEP

      3072:oCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxp:oqDAwl0xPTMiR9JSSxPUKYGdodHU

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks