Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.ea8cbde2a13a3fdcb31ade83e7498510_JC.exe

  • Size

    393KB

  • Sample

    231101-ksl2xagb36

  • MD5

    ea8cbde2a13a3fdcb31ade83e7498510

  • SHA1

    7130588684c87d29cbd9bf25cd8823f69dda5e2e

  • SHA256

    e75de707168383230955693f4d7079f1099cf520d27bcba20d3226c9554e18ef

  • SHA512

    5e89460e76edf59a55e11815692917fc5caf32e4adae92bbd5cedf3666e9a14f1ae8f651860adefda2b0f14084897588b2b25c80c75334ec9858ecb612bee194

  • SSDEEP

    6144:gs833CnotE7RN8JmrwW9NaZIGBQLBYUSWO7F3vZeSRlaYy/hO3s:mLtE7RaflQL6UfMMd/hes

Score
7/10

Malware Config

Targets

    • Target

      NEAS.ea8cbde2a13a3fdcb31ade83e7498510_JC.exe

    • Size

      393KB

    • MD5

      ea8cbde2a13a3fdcb31ade83e7498510

    • SHA1

      7130588684c87d29cbd9bf25cd8823f69dda5e2e

    • SHA256

      e75de707168383230955693f4d7079f1099cf520d27bcba20d3226c9554e18ef

    • SHA512

      5e89460e76edf59a55e11815692917fc5caf32e4adae92bbd5cedf3666e9a14f1ae8f651860adefda2b0f14084897588b2b25c80c75334ec9858ecb612bee194

    • SSDEEP

      6144:gs833CnotE7RN8JmrwW9NaZIGBQLBYUSWO7F3vZeSRlaYy/hO3s:mLtE7RaflQL6UfMMd/hes

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks