Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.fa2f8ea0dface3b3e935b106edef4150.exe
-
Size
3.5MB
-
Sample
231103-sfxlwadc6w
-
MD5
fa2f8ea0dface3b3e935b106edef4150
-
SHA1
1944790945d8b7fee88d474404eb90b89d9384d6
-
SHA256
7bfffae521bf579cd33463deb7e19ce83c69a5ab40bb71af96c3fe141c7b16fd
-
SHA512
d0b3b0df5a5190444290b4e538546d01e7384d564bdd1aa86786f4f6b5ef759277627cb7ead3b79a9fd36b2c3c963aab7eb5b0c19378358fd09bb195dcd76827
-
SSDEEP
49152:mMXEiGdi/R+kKp+6FlLlCYuJPA3LBuq8NBU8AxdwDHVfv9ytA8Wpl+SJ8lQqhq:aBp+gtlCRiSJ8
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.fa2f8ea0dface3b3e935b106edef4150.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.fa2f8ea0dface3b3e935b106edef4150.dll
Resource
win10v2004-20231023-en
Malware Config
Targets
-
-
Target
NEAS.fa2f8ea0dface3b3e935b106edef4150.exe
-
Size
3.5MB
-
MD5
fa2f8ea0dface3b3e935b106edef4150
-
SHA1
1944790945d8b7fee88d474404eb90b89d9384d6
-
SHA256
7bfffae521bf579cd33463deb7e19ce83c69a5ab40bb71af96c3fe141c7b16fd
-
SHA512
d0b3b0df5a5190444290b4e538546d01e7384d564bdd1aa86786f4f6b5ef759277627cb7ead3b79a9fd36b2c3c963aab7eb5b0c19378358fd09bb195dcd76827
-
SSDEEP
49152:mMXEiGdi/R+kKp+6FlLlCYuJPA3LBuq8NBU8AxdwDHVfv9ytA8Wpl+SJ8lQqhq:aBp+gtlCRiSJ8
Score10/10-
Modifies security service
-
Sets DLL path for service in the registry
-
Checks for any installed AV software in registry
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1