Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.b5cfef516ea88a5bf86a7cc9b7ed7630.exe
-
Size
1.2MB
-
Sample
231016-w7n1labf55
-
MD5
b5cfef516ea88a5bf86a7cc9b7ed7630
-
SHA1
1b6c2f67429384389b35580665df840df95aa2dc
-
SHA256
dde2aa1d9cdf8e8309a0e2eba082bb274ab39179d3e5df6b96c375bd769aa7ef
-
SHA512
87dd24aad6bed707f74a312138514bd8d2c246c1bd01662445d6eb386579a6af89db73796adef0346dddafb3e1bd3829a91eb229f43c237925b9d1048d999f1e
-
SSDEEP
24576:oWLy16uYZou4zVE2/qJ3XvIPWa78npdgPlQrYfUHSoWtdtZXWMajIIivbV5:VLyP4Z4xENg+aQnHwYqUFWtdn8ER5
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.b5cfef516ea88a5bf86a7cc9b7ed7630.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.b5cfef516ea88a5bf86a7cc9b7ed7630.exe
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
NEAS.b5cfef516ea88a5bf86a7cc9b7ed7630.exe
-
Size
1.2MB
-
MD5
b5cfef516ea88a5bf86a7cc9b7ed7630
-
SHA1
1b6c2f67429384389b35580665df840df95aa2dc
-
SHA256
dde2aa1d9cdf8e8309a0e2eba082bb274ab39179d3e5df6b96c375bd769aa7ef
-
SHA512
87dd24aad6bed707f74a312138514bd8d2c246c1bd01662445d6eb386579a6af89db73796adef0346dddafb3e1bd3829a91eb229f43c237925b9d1048d999f1e
-
SSDEEP
24576:oWLy16uYZou4zVE2/qJ3XvIPWa78npdgPlQrYfUHSoWtdtZXWMajIIivbV5:VLyP4Z4xENg+aQnHwYqUFWtdn8ER5
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-