Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.d0768d3c339a290e17c82ce76aeee5e0.exe

  • Size

    279KB

  • Sample

    231101-g8kl8sbf4w

  • MD5

    d0768d3c339a290e17c82ce76aeee5e0

  • SHA1

    784ebecdc28d7d13f07d32048e175c350eb8ab3e

  • SHA256

    d844156774f3b34c21adf248995cf8a536ab4ffccc7345568cc3400db6568029

  • SHA512

    012fb25124fbac0c82c2650e1dbb4b6c11df808a3976bdfba8173cde44192e2db2a6595d5de26be2ccc00e900dde6ee251de0cc7dd645f9b373ef86bf06340c6

  • SSDEEP

    6144:PppQ1DOWK35CPXbo92ynnZlVrtv35CPXbo92ynn8sbeWD2/P:PMJ6FHRFbe73

Score
10/10

Malware Config

Targets

    • Target

      NEAS.d0768d3c339a290e17c82ce76aeee5e0.exe

    • Size

      279KB

    • MD5

      d0768d3c339a290e17c82ce76aeee5e0

    • SHA1

      784ebecdc28d7d13f07d32048e175c350eb8ab3e

    • SHA256

      d844156774f3b34c21adf248995cf8a536ab4ffccc7345568cc3400db6568029

    • SHA512

      012fb25124fbac0c82c2650e1dbb4b6c11df808a3976bdfba8173cde44192e2db2a6595d5de26be2ccc00e900dde6ee251de0cc7dd645f9b373ef86bf06340c6

    • SSDEEP

      6144:PppQ1DOWK35CPXbo92ynnZlVrtv35CPXbo92ynn8sbeWD2/P:PMJ6FHRFbe73

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks