Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.475c9d54a0462300b13d5b70840de560_JC.exe

  • Size

    208KB

  • Sample

    231102-hbrjysge6y

  • MD5

    475c9d54a0462300b13d5b70840de560

  • SHA1

    b19e4bd5d5d8d21dc8fe2a74cf2f3ee90032d357

  • SHA256

    dfc0768c4dcfdf1f0024542b29389a825d20c7bacffa0156da97d11f762bff21

  • SHA512

    4fa43288efb27e66833dfdc17d8e767f1498668b5fe121474a993397f2ff8aa32945627993248f3ecc1899d427a04727799404f00b44a5e0e3936a3a9d5d971a

  • SSDEEP

    6144:pTBLeUo5lKaQAAMwGsmLrZNs/VKi/MwGsV:lBLeUoDQ3MmmpNs/VXMmV

Score
10/10

Malware Config

Targets

    • Target

      NEAS.475c9d54a0462300b13d5b70840de560_JC.exe

    • Size

      208KB

    • MD5

      475c9d54a0462300b13d5b70840de560

    • SHA1

      b19e4bd5d5d8d21dc8fe2a74cf2f3ee90032d357

    • SHA256

      dfc0768c4dcfdf1f0024542b29389a825d20c7bacffa0156da97d11f762bff21

    • SHA512

      4fa43288efb27e66833dfdc17d8e767f1498668b5fe121474a993397f2ff8aa32945627993248f3ecc1899d427a04727799404f00b44a5e0e3936a3a9d5d971a

    • SSDEEP

      6144:pTBLeUo5lKaQAAMwGsmLrZNs/VKi/MwGsV:lBLeUoDQ3MmmpNs/VXMmV

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks