Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.f6f41ccb0688968537c0b8aa31bc4cb5_JC.exe
-
Size
1.9MB
-
Sample
231021-yklcashf4s
-
MD5
f6f41ccb0688968537c0b8aa31bc4cb5
-
SHA1
16180b89455533ab3aaff4963241e05005c6cca6
-
SHA256
a497aadae9391ade5a03102288afe12e0bc05663fb73f4693797dcd0e25ede61
-
SHA512
97fcefeeb6029e666d15cce8a5a68c9f69e96f039f14fcc30b87fbe33985e77fcd6e5003b25f5e8d0e74a5c57251ce3f2a01fdb3399e59ba5b65ae6875854359
-
SSDEEP
49152:dKQD3rbiPnHCyVmRGhcEtEkbU4PHDRmpdUG7ds:dfjviPnHCyqU91jRmpdM
Behavioral task
behavioral1
Sample
NEAS.f6f41ccb0688968537c0b8aa31bc4cb5_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.f6f41ccb0688968537c0b8aa31bc4cb5_JC.exe
Resource
win10v2004-20231020-en
Malware Config
Targets
-
-
Target
NEAS.f6f41ccb0688968537c0b8aa31bc4cb5_JC.exe
-
Size
1.9MB
-
MD5
f6f41ccb0688968537c0b8aa31bc4cb5
-
SHA1
16180b89455533ab3aaff4963241e05005c6cca6
-
SHA256
a497aadae9391ade5a03102288afe12e0bc05663fb73f4693797dcd0e25ede61
-
SHA512
97fcefeeb6029e666d15cce8a5a68c9f69e96f039f14fcc30b87fbe33985e77fcd6e5003b25f5e8d0e74a5c57251ce3f2a01fdb3399e59ba5b65ae6875854359
-
SSDEEP
49152:dKQD3rbiPnHCyVmRGhcEtEkbU4PHDRmpdUG7ds:dfjviPnHCyqU91jRmpdM
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-