Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.fe3bb50986a528b9bb04f7e056d8d3c0_JC.exe

  • Size

    1.5MB

  • Sample

    231102-qtb6zsce7z

  • MD5

    fe3bb50986a528b9bb04f7e056d8d3c0

  • SHA1

    15155ecf77a7b7f3d0eece76fc986769e696d373

  • SHA256

    e53f273b75d83a4101e23605dec2876ea5513f459c3c388c8a58944dc2491002

  • SHA512

    934972e64bd596c901658bb1e72d983f66616305ebb71e02ee2adfd7ac9b59c2f36dde3ac1e13b55fc248cfa87ac884f3ab36d4bf58db01f7b74044735667b4a

  • SSDEEP

    24576:pxWVeyRYWc40RDI1pE25HLaHh3NXYtVvMGNAOfBPCQgtkBfodSq:p8YWl3wWo5KkGNA+CQikBfOSq

Malware Config

Targets

    • Target

      NEAS.fe3bb50986a528b9bb04f7e056d8d3c0_JC.exe

    • Size

      1.5MB

    • MD5

      fe3bb50986a528b9bb04f7e056d8d3c0

    • SHA1

      15155ecf77a7b7f3d0eece76fc986769e696d373

    • SHA256

      e53f273b75d83a4101e23605dec2876ea5513f459c3c388c8a58944dc2491002

    • SHA512

      934972e64bd596c901658bb1e72d983f66616305ebb71e02ee2adfd7ac9b59c2f36dde3ac1e13b55fc248cfa87ac884f3ab36d4bf58db01f7b74044735667b4a

    • SSDEEP

      24576:pxWVeyRYWc40RDI1pE25HLaHh3NXYtVvMGNAOfBPCQgtkBfodSq:p8YWl3wWo5KkGNA+CQikBfOSq

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks