Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
138s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
02/11/2023, 15:55
General
-
Target
NEAS.b98713a45aeee471bbf8ffbd633e7c10_JC.exe
-
Size
85KB
-
MD5
b98713a45aeee471bbf8ffbd633e7c10
-
SHA1
68661a632985a66ed172d0031814746bafdeccf9
-
SHA256
ecc12f1d113f11365d8da4c0a48e6c7c61804e4775458c231db10e8f7a855c9c
-
SHA512
b12aa41f070aa02b0642f5f994b1e86e3e85f473deff2330928c410c3e2056d162e84e8a8b515d99f28fac380cdfa38bcd18e704e709b581c7690b97caec077e
-
SSDEEP
1536:F3cm5wShMNmqd0FA2huozXCnEthnILZuB1BWvl4oiCX/4mpPkRzMOBPE3S:Fc7SyN2M4N3XemfmRkMOq3S
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.b98713a45aeee471bbf8ffbd633e7c10_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.b98713a45aeee471bbf8ffbd633e7c10_JC.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\NEAS.b98713a45aeee471bbf8ffbd633e7c10_JC.exeC:\Users\Admin\AppData\Local\Temp\NEAS.b98713a45aeee471bbf8ffbd633e7c10_JC.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
85KB
MD5a13290d6ead2c4e287ac54fff9b9fd32
SHA1c693ea10cf5a73f8da620b9544917366649bcd29
SHA2561171116fd529f68410d1f046f2b374b4f7dc3edd16bfea1d86a0e26b1997a5f1
SHA512cb16588c90d44ecd22d48e976c15447583ca15bff78d6c238af12909295fbb6bf4dc5c76f50d957be7515474634a9016b4553f17a62a29dc81a9169abb622cf0
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
56KB
-
Filesize
108KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
108KB
-
Filesize
108KB