Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.882b0e3a6fa4f034d7b920a80fbf0c20.exe
-
Size
2.6MB
-
Sample
231016-w34v9ahd36
-
MD5
882b0e3a6fa4f034d7b920a80fbf0c20
-
SHA1
09700a62c0848d82096e257615fc340fa7f2768f
-
SHA256
78a78d59eebe09d08b4851b830317fa46f06f9ad78290d44dcb1f28fe805be79
-
SHA512
aa685817eb309e6ce39ba7a032c4ec3b00ad6cf32271d7c6eb0b1f37fb4db380317a633f9a746557173c36828718aefefa35ff508a8ef03c9ba43c2ac8caed3a
-
SSDEEP
49152:TeS12nRc6C5CEAHD26ICQVt1ULUQRP6a6YPkCLJ37xbIjNyX5Hxzl/u:6S+c6ZEmqCMtmoQRP6aZtnsNq9l/u
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.882b0e3a6fa4f034d7b920a80fbf0c20.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.882b0e3a6fa4f034d7b920a80fbf0c20.exe
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
NEAS.882b0e3a6fa4f034d7b920a80fbf0c20.exe
-
Size
2.6MB
-
MD5
882b0e3a6fa4f034d7b920a80fbf0c20
-
SHA1
09700a62c0848d82096e257615fc340fa7f2768f
-
SHA256
78a78d59eebe09d08b4851b830317fa46f06f9ad78290d44dcb1f28fe805be79
-
SHA512
aa685817eb309e6ce39ba7a032c4ec3b00ad6cf32271d7c6eb0b1f37fb4db380317a633f9a746557173c36828718aefefa35ff508a8ef03c9ba43c2ac8caed3a
-
SSDEEP
49152:TeS12nRc6C5CEAHD26ICQVt1ULUQRP6a6YPkCLJ37xbIjNyX5Hxzl/u:6S+c6ZEmqCMtmoQRP6aZtnsNq9l/u
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1