Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

NEAS.698bb...90.exe

windows7-x64

7

NEAS.698bb...90.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    155s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/11/2023, 14:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.698bba413f0afcf7502271daa6443a90.exe

  • Size

    29KB

  • MD5

    698bba413f0afcf7502271daa6443a90

  • SHA1

    d8d0c06f7bfe1150264d50c9f2c3ac07855d0100

  • SHA256

    a3a01a60bb61fb6a0fac48fcc0d1ea6beaf13b33f47630262749dc614f4461d0

  • SHA512

    5c0746101e8453b37a4d4c31abb875e1020e4ac037939155cd94c44294cd250046bd13d2af4bad1408ad088fb25b1eedc803dd0e31e532e5a1d174d41da83531

  • SSDEEP

    768:ITRfpN0pOy3OzeXmOGXbJOlB2vsLCik5dAy7b6lSp:IHzzeWHXbJGB2EOik5h36lq

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.698bba413f0afcf7502271daa6443a90.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.698bba413f0afcf7502271daa6443a90.exe"
    1⤵
      PID:5372

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\My Downloads\LordOfTheRingsr Patch.exe
      Filesize

      29KB

      MD5

      ba547fc458fd6b490d6c48b2574986cb

      SHA1

      48fd8de2356017cd24ba481c6bac3d25f8be8c83

      SHA256

      09f70653ba0ef5565e3d60c1ede2e50a2b5eacc57c4ddd93668a6bde3e927f46

      SHA512

      a9a445a3fe7d5663de5ab5d8edeaa76c99e3ce1b0b0ccb85129f1dafcb2b66ad0daaeb71683b39e96b1bace9e754d14225bfe075325c58f397edc245a803da88

      Download Submit

    • memory/5372-0-0x0000000000400000-0x000000000041A000-memory.dmp

      Filesize

      104KB

      Download

    • memory/5372-101-0x0000000000400000-0x000000000041A000-memory.dmp

      Filesize

      104KB

      Download