Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.fa3532dae0960dfce87485147561ed00_JC.exe

  • Size

    432KB

  • Sample

    231102-s8pfzaec9x

  • MD5

    fa3532dae0960dfce87485147561ed00

  • SHA1

    87fc0bbb8b821ded99fabfb340ba776dc51eaa5f

  • SHA256

    163c240deddc965821c634abe5003ff7f0e0bd2ecd90ecb0661c5bf017dd152a

  • SHA512

    39562049d38c3d789a7d9d3c6e48fcf24e500d34f2007e5978528590051557af64a557e817185ae494b0b20e6e250189764d5f3faff81229e5f1b1907316bb1e

  • SSDEEP

    12288:7mR3i//OVLCoooooooooooooooooooooooooYKiUNl:7ykWVLw47

Score
10/10

Malware Config

Targets

    • Target

      NEAS.fa3532dae0960dfce87485147561ed00_JC.exe

    • Size

      432KB

    • MD5

      fa3532dae0960dfce87485147561ed00

    • SHA1

      87fc0bbb8b821ded99fabfb340ba776dc51eaa5f

    • SHA256

      163c240deddc965821c634abe5003ff7f0e0bd2ecd90ecb0661c5bf017dd152a

    • SHA512

      39562049d38c3d789a7d9d3c6e48fcf24e500d34f2007e5978528590051557af64a557e817185ae494b0b20e6e250189764d5f3faff81229e5f1b1907316bb1e

    • SSDEEP

      12288:7mR3i//OVLCoooooooooooooooooooooooooYKiUNl:7ykWVLw47

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks