Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.ae30d7ffe24e82c4f038b2387b9c94b0.exe
-
Size
204KB
-
Sample
231016-w64pnahf6x
-
MD5
ae30d7ffe24e82c4f038b2387b9c94b0
-
SHA1
c61e585c5cc7e356a71058bf3261936e3b6b7b40
-
SHA256
5b4fa6c2722f1de10b7139fa65cf4360dde0c2bb7b6ae0dee69f1452d384c5a1
-
SHA512
0685b1bc9c818b7d0c8cbb292ce986d15f28d209f24a37faa4d453ee48c8fdad8bb6638de3873efbbfd2fa7d5c36cf04f5b2b47c24d33ae75491a5be9c583241
-
SSDEEP
3072:RmIW8NG0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWBS:odr4QxL7B9W0c1RCzR/fSmlR
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.ae30d7ffe24e82c4f038b2387b9c94b0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.ae30d7ffe24e82c4f038b2387b9c94b0.exe
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
NEAS.ae30d7ffe24e82c4f038b2387b9c94b0.exe
-
Size
204KB
-
MD5
ae30d7ffe24e82c4f038b2387b9c94b0
-
SHA1
c61e585c5cc7e356a71058bf3261936e3b6b7b40
-
SHA256
5b4fa6c2722f1de10b7139fa65cf4360dde0c2bb7b6ae0dee69f1452d384c5a1
-
SHA512
0685b1bc9c818b7d0c8cbb292ce986d15f28d209f24a37faa4d453ee48c8fdad8bb6638de3873efbbfd2fa7d5c36cf04f5b2b47c24d33ae75491a5be9c583241
-
SSDEEP
3072:RmIW8NG0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWBS:odr4QxL7B9W0c1RCzR/fSmlR
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-