Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.dbec456e4793f8768917c6485ebacfa0_JC.exe

  • Size

    290KB

  • Sample

    231031-twaygsba6s

  • MD5

    dbec456e4793f8768917c6485ebacfa0

  • SHA1

    d18e260198ac694eb73454d1869caec4e5702aae

  • SHA256

    5e24f7e874ffa2259bdf42b68e717844e212e9240459b4e205ad07b3860dc3cf

  • SHA512

    87e08c57073481ee888d1bc0c725ed48c9bc0380f1e116e813019caaf149cb11785ccff1f288d1de3bf868e4b6ee4f47fded927861c8ce453c1cfb8d38b3f395

  • SSDEEP

    3072:pcJoSrl92G2IHmK37UIPDXk79YKRonkWEh+h63aMWRD13Px25kgmC2WkjnX+dO5k:0l9TFA7L7h+Aaj1/r1C2h+Ovg7h+A

Score
10/10

Malware Config

Targets

    • Target

      NEAS.dbec456e4793f8768917c6485ebacfa0_JC.exe

    • Size

      290KB

    • MD5

      dbec456e4793f8768917c6485ebacfa0

    • SHA1

      d18e260198ac694eb73454d1869caec4e5702aae

    • SHA256

      5e24f7e874ffa2259bdf42b68e717844e212e9240459b4e205ad07b3860dc3cf

    • SHA512

      87e08c57073481ee888d1bc0c725ed48c9bc0380f1e116e813019caaf149cb11785ccff1f288d1de3bf868e4b6ee4f47fded927861c8ce453c1cfb8d38b3f395

    • SSDEEP

      3072:pcJoSrl92G2IHmK37UIPDXk79YKRonkWEh+h63aMWRD13Px25kgmC2WkjnX+dO5k:0l9TFA7L7h+Aaj1/r1C2h+Ovg7h+A

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks