Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.0b4f30749c265c8814acd6382f5f1690.exe

  • Size

    275KB

  • Sample

    231101-q6l7qabd69

  • MD5

    0b4f30749c265c8814acd6382f5f1690

  • SHA1

    38cc925e407c2519c9783ecfd5001c040d3d4e71

  • SHA256

    99e1041842e63f57bb8e6da0178bcb7020110d7b530fe54d4e7c40370b8004d3

  • SHA512

    f90427874b633b0791f9c488dfa2c6bf714d8507a3a89b9d2b14f0ae679076bd8253f9a63df3882c84eecdedf224be6d88b9913e96776d440a24eed92c59b498

  • SSDEEP

    6144:FNWUA7yXInM1SLGS+sz/QoooooooooooooooooUvu:veyXInVssz/0vu

Score
10/10

Malware Config

Targets

    • Target

      NEAS.0b4f30749c265c8814acd6382f5f1690.exe

    • Size

      275KB

    • MD5

      0b4f30749c265c8814acd6382f5f1690

    • SHA1

      38cc925e407c2519c9783ecfd5001c040d3d4e71

    • SHA256

      99e1041842e63f57bb8e6da0178bcb7020110d7b530fe54d4e7c40370b8004d3

    • SHA512

      f90427874b633b0791f9c488dfa2c6bf714d8507a3a89b9d2b14f0ae679076bd8253f9a63df3882c84eecdedf224be6d88b9913e96776d440a24eed92c59b498

    • SSDEEP

      6144:FNWUA7yXInM1SLGS+sz/QoooooooooooooooooUvu:veyXInVssz/0vu

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks