Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.f82dc1430efc4b523b50ae3933299f20.exe

  • Size

    231KB

  • Sample

    231021-1g1zpadf97

  • MD5

    f82dc1430efc4b523b50ae3933299f20

  • SHA1

    8f27403cf9810deea0184c23e2d072b82c2bbf9b

  • SHA256

    7f2ca17a538a5c3c43c00921ea13d34d119346689940e743e398e75caf2a93f2

  • SHA512

    e7d89f68f0fe7045ea5e9cfe711e6e164223c8fddf43b0179fe77df4c584aaa3ebaad741822b8566beede55fc02b91e389e23c50fecc5c841ecae3f6c2b99588

  • SSDEEP

    6144:aDOxZXPIo5R4nM/40yJy9lDqpKomW5ESQxYxa7hZkUMD:lXpqhyTGy2uQXD

Malware Config

Targets

    • Target

      NEAS.f82dc1430efc4b523b50ae3933299f20.exe

    • Size

      231KB

    • MD5

      f82dc1430efc4b523b50ae3933299f20

    • SHA1

      8f27403cf9810deea0184c23e2d072b82c2bbf9b

    • SHA256

      7f2ca17a538a5c3c43c00921ea13d34d119346689940e743e398e75caf2a93f2

    • SHA512

      e7d89f68f0fe7045ea5e9cfe711e6e164223c8fddf43b0179fe77df4c584aaa3ebaad741822b8566beede55fc02b91e389e23c50fecc5c841ecae3f6c2b99588

    • SSDEEP

      6144:aDOxZXPIo5R4nM/40yJy9lDqpKomW5ESQxYxa7hZkUMD:lXpqhyTGy2uQXD

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks