Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

NEAS.fa35b...f0.exe

windows7-x64

8

NEAS.fa35b...f0.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.fa35b2daeea4893c39c7757406645af0.exe

  • Size

    473KB

  • Sample

    231022-v481xsda27

  • MD5

    fa35b2daeea4893c39c7757406645af0

  • SHA1

    5a4db2dfa8b4065ec4a07eac157d9d0b9c6609a7

  • SHA256

    8ef16d53048177e8d3084bb8bbc4c1f7f291b56d25e15f6523aab7712805856e

  • SHA512

    a24a57ea24a1751bed2186c267190ecc18feefed2419a94566d7839b8034fa6fe9c695a4b0de7bbf73bb6486d857eb61016733f2cca93238dd305bee7f23edf1

  • SSDEEP

    1536:ur3Z5IfQmv81a1xyXHZ+NGQSLNmCm6oyz7jBd7qDmbNPMJAVC+++6:yJOfQm01mxyXHZKG7pm6j77C

Score
8/10
evasion

Malware Config

Targets

    • Target

      NEAS.fa35b2daeea4893c39c7757406645af0.exe

    • Size

      473KB

    • MD5

      fa35b2daeea4893c39c7757406645af0

    • SHA1

      5a4db2dfa8b4065ec4a07eac157d9d0b9c6609a7

    • SHA256

      8ef16d53048177e8d3084bb8bbc4c1f7f291b56d25e15f6523aab7712805856e

    • SHA512

      a24a57ea24a1751bed2186c267190ecc18feefed2419a94566d7839b8034fa6fe9c695a4b0de7bbf73bb6486d857eb61016733f2cca93238dd305bee7f23edf1

    • SSDEEP

      1536:ur3Z5IfQmv81a1xyXHZ+NGQSLNmCm6oyz7jBd7qDmbNPMJAVC+++6:yJOfQm01mxyXHZKG7pm6j77C

    Score
    8/10
    evasion

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks