Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.d15c41432b27bee9fcf50d2dd5ebca70_JC.exe
-
Size
107KB
-
Sample
231101-lt6clsgg25
-
MD5
d15c41432b27bee9fcf50d2dd5ebca70
-
SHA1
744cffb01ccaf6924653e5b654ed8682c3e1c765
-
SHA256
33a878ecf0b07f240d2b1ae5fae92adc7e918f3fb052370b62561ba785af9455
-
SHA512
873725e99d76cde57db1dfd15a915fed4e1212889b36f5a8894d6563a944a4f78446054847ed3e69fd1a7e497330a76ff5f692383155f90d7d4b7b900f4f6c20
-
SSDEEP
3072:6e7Wpcm4HISSP4jgbEl4TWZFU6TcTSWEmOTcTSWEm5:Rqe6CgbEWToZ8
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d15c41432b27bee9fcf50d2dd5ebca70_JC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.d15c41432b27bee9fcf50d2dd5ebca70_JC.exe
Resource
win10v2004-20231023-en
Malware Config
Targets
-
-
Target
NEAS.d15c41432b27bee9fcf50d2dd5ebca70_JC.exe
-
Size
107KB
-
MD5
d15c41432b27bee9fcf50d2dd5ebca70
-
SHA1
744cffb01ccaf6924653e5b654ed8682c3e1c765
-
SHA256
33a878ecf0b07f240d2b1ae5fae92adc7e918f3fb052370b62561ba785af9455
-
SHA512
873725e99d76cde57db1dfd15a915fed4e1212889b36f5a8894d6563a944a4f78446054847ed3e69fd1a7e497330a76ff5f692383155f90d7d4b7b900f4f6c20
-
SSDEEP
3072:6e7Wpcm4HISSP4jgbEl4TWZFU6TcTSWEmOTcTSWEm5:Rqe6CgbEWToZ8
Score9/10-
Renames multiple (501) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Renames multiple (764) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-