Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.fcb63bb6f8b1864df551b8827c753ae0_JC.exe
-
Size
110KB
-
Sample
231101-p9xbesge4z
-
MD5
fcb63bb6f8b1864df551b8827c753ae0
-
SHA1
cf4a3a603ec1924eddc7f9d9ffd1e7d30e3ef15b
-
SHA256
d3c2e966c035f41a5174f20c1f0a19f9a9aafd71981aac134cdfc9a040218a54
-
SHA512
7b515b49a4fd1edbdc0ee9dbb7cb5a2b22b4d83a6412fd670749b0cc5908beed0269c9110874e9b7045dfa72a8c07d830968e6b8701e6bff9c520518b0f9f001
-
SSDEEP
1536:ELNIW39SaZTbFARlq7jC1OZstZu0TSVEdUJWTWd18fH:ELlbZTZX3BAtTSVEdUJWTWd18fH
Behavioral task
behavioral1
Sample
NEAS.fcb63bb6f8b1864df551b8827c753ae0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.fcb63bb6f8b1864df551b8827c753ae0_JC.exe
Resource
win10v2004-20231020-en
Malware Config
Targets
-
-
Target
NEAS.fcb63bb6f8b1864df551b8827c753ae0_JC.exe
-
Size
110KB
-
MD5
fcb63bb6f8b1864df551b8827c753ae0
-
SHA1
cf4a3a603ec1924eddc7f9d9ffd1e7d30e3ef15b
-
SHA256
d3c2e966c035f41a5174f20c1f0a19f9a9aafd71981aac134cdfc9a040218a54
-
SHA512
7b515b49a4fd1edbdc0ee9dbb7cb5a2b22b4d83a6412fd670749b0cc5908beed0269c9110874e9b7045dfa72a8c07d830968e6b8701e6bff9c520518b0f9f001
-
SSDEEP
1536:ELNIW39SaZTbFARlq7jC1OZstZu0TSVEdUJWTWd18fH:ELlbZTZX3BAtTSVEdUJWTWd18fH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-