Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.fd27bedb3859a30bce806852daa55f40.exe
-
Size
3.4MB
-
Sample
231101-rred1ahg8z
-
MD5
fd27bedb3859a30bce806852daa55f40
-
SHA1
172d7a1d9d5ab7f2c3b0b23099818dc82f6c1300
-
SHA256
ab4cb361575eabbe500b1075a732280a6a43e55ae023d0152cc1c595c40d37e6
-
SHA512
f795a3af0f5d746eda6b5a61d1f9fad3b1fdde2b25388f8c4bae8d46bf305863b77bf74152863f5dd41c9b5d8c7cd2e9a13d78877a024da183af35af19bc87fc
-
SSDEEP
98304:5tTibykGPIVw12C2MkpuBaptbp02wAagbbw:5t+bykGPI612C2ugtt0bfgbU
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.fd27bedb3859a30bce806852daa55f40.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.fd27bedb3859a30bce806852daa55f40.exe
Resource
win10v2004-20231023-en
Malware Config
Targets
-
-
Target
NEAS.fd27bedb3859a30bce806852daa55f40.exe
-
Size
3.4MB
-
MD5
fd27bedb3859a30bce806852daa55f40
-
SHA1
172d7a1d9d5ab7f2c3b0b23099818dc82f6c1300
-
SHA256
ab4cb361575eabbe500b1075a732280a6a43e55ae023d0152cc1c595c40d37e6
-
SHA512
f795a3af0f5d746eda6b5a61d1f9fad3b1fdde2b25388f8c4bae8d46bf305863b77bf74152863f5dd41c9b5d8c7cd2e9a13d78877a024da183af35af19bc87fc
-
SSDEEP
98304:5tTibykGPIVw12C2MkpuBaptbp02wAagbbw:5t+bykGPI612C2ugtt0bfgbU
Score10/10-
Modifies WinLogon for persistence
-
Drops file in System32 directory
-