Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.ba8d1f6b556573fd67ee43d9f5669f50_JC.exe

  • Size

    429KB

  • Sample

    231103-ch5ghaad41

  • MD5

    ba8d1f6b556573fd67ee43d9f5669f50

  • SHA1

    f7194a5cb6e88e33c55d0aced70bbab43a89eee6

  • SHA256

    7d3d5a9b0a13ee8abd80749ae20b1d899c30d1606598b75579ad68f99ef2c29a

  • SHA512

    69b06675c7db759beaf62d24e70f1ad2ed24bcea2fb23d112f265c67f52ea834048e52aacb756c099289c97441b6b18fe68505eeb5c9f394be83d9b4738ef143

  • SSDEEP

    6144:CXzXq3NV/Ah1G/AcQ///NR5fLYG3eujPQ///NR5f:CzP/NcZ7/N

Score
10/10

Malware Config

Targets

    • Target

      NEAS.ba8d1f6b556573fd67ee43d9f5669f50_JC.exe

    • Size

      429KB

    • MD5

      ba8d1f6b556573fd67ee43d9f5669f50

    • SHA1

      f7194a5cb6e88e33c55d0aced70bbab43a89eee6

    • SHA256

      7d3d5a9b0a13ee8abd80749ae20b1d899c30d1606598b75579ad68f99ef2c29a

    • SHA512

      69b06675c7db759beaf62d24e70f1ad2ed24bcea2fb23d112f265c67f52ea834048e52aacb756c099289c97441b6b18fe68505eeb5c9f394be83d9b4738ef143

    • SSDEEP

      6144:CXzXq3NV/Ah1G/AcQ///NR5fLYG3eujPQ///NR5f:CzP/NcZ7/N

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks