Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.c2b039a23bb7b1be7d4cf1cf10c38570_JC.exe
-
Size
25KB
-
Sample
231103-dlwjfabb3t
-
MD5
c2b039a23bb7b1be7d4cf1cf10c38570
-
SHA1
3f57bbf8ab667523e4c60094634d3a8cc195128f
-
SHA256
dfa6122994dfe6baa93997497250533b6dc95a4b73dc2044b7bf8998eaafc2d6
-
SHA512
f83e0a280abe774be47247a82bf809c294873195ed8ff9c796bc58981f7a42aeb75c2716f8928ef8cb8f1e87345d862566f7aaeb600e0e9765319e26a89b9943
-
SSDEEP
192:uvxLS4de1HNAUQcX+l2Hg5cIasUU4L3bba4q4APTK7Yypy0kIBCCvrCrNRiAnJ9J:uvxLSkeJndXQrWjMcYyrvL+P0hYw/nIb
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c2b039a23bb7b1be7d4cf1cf10c38570_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.c2b039a23bb7b1be7d4cf1cf10c38570_JC.exe
Resource
win10v2004-20231020-en
Malware Config
Targets
-
-
Target
NEAS.c2b039a23bb7b1be7d4cf1cf10c38570_JC.exe
-
Size
25KB
-
MD5
c2b039a23bb7b1be7d4cf1cf10c38570
-
SHA1
3f57bbf8ab667523e4c60094634d3a8cc195128f
-
SHA256
dfa6122994dfe6baa93997497250533b6dc95a4b73dc2044b7bf8998eaafc2d6
-
SHA512
f83e0a280abe774be47247a82bf809c294873195ed8ff9c796bc58981f7a42aeb75c2716f8928ef8cb8f1e87345d862566f7aaeb600e0e9765319e26a89b9943
-
SSDEEP
192:uvxLS4de1HNAUQcX+l2Hg5cIasUU4L3bba4q4APTK7Yypy0kIBCCvrCrNRiAnJ9J:uvxLSkeJndXQrWjMcYyrvL+P0hYw/nIb
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-