Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
139s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
16/10/2023, 18:37
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c5a355133420bc0ccb70c8c1046dfe30.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.c5a355133420bc0ccb70c8c1046dfe30.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.c5a355133420bc0ccb70c8c1046dfe30.exe
-
Size
64KB
-
MD5
c5a355133420bc0ccb70c8c1046dfe30
-
SHA1
1228c4bc610201d8dc67d9571ca7e95eb09e05cb
-
SHA256
2b3902834971516c38172aef8822efd28187a21c4fa3da0f91a06ff0be15a6f7
-
SHA512
87f4fb52a00c68850e3c3a1dfb1ffb213344cf51cf5ce53cec7a1225dd9c97a824b260268ece2d141f394ec8fdfea882bc0e81f5c1763397fc998f5220a27db4
-
SSDEEP
768:RzRiRZD6QskBkbkQroL19C4sJoHn4oky7RjT8X2yTrbKYtRMhkrnogHH+76J:R0Ck+bkQ0LOoHFkyx6frmYaeNHZ
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1544 NEAS.c5a355133420bc0ccb70c8c1046dfe30.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\olemdb32.dl_ NEAS.c5a355133420bc0ccb70c8c1046dfe30.exe File created C:\Windows\SysWOW64\olemdb32.dll NEAS.c5a355133420bc0ccb70c8c1046dfe30.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1544 NEAS.c5a355133420bc0ccb70c8c1046dfe30.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
23KB
MD565387b1305f01ede9bce1b664207d5d7
SHA119d719d16958e6a1c5367b578cb9ff7700e695bf
SHA256148f1d2ce99fb0305e53fd24add20cd19cc420e9c1d1b64abf42b456da94cd23
SHA512cd64957c47979626be9a77b2a2ee2d0b22b72540369a4b6cfe1c1c9f8180b546db0b6e637259dd8f7a09506d738ec57fc34b116e199641c40f55e0d5b40a2a29