Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
152s -
max time network
165s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
04/11/2023, 09:00
Behavioral task
behavioral1
Sample
NEAS.8a8837075245ff977b6f33faada202f0_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.8a8837075245ff977b6f33faada202f0_JC.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.8a8837075245ff977b6f33faada202f0_JC.exe
-
Size
184KB
-
MD5
8a8837075245ff977b6f33faada202f0
-
SHA1
4c2b5cd7bd9cc9d93335b7d2e3011c011261aeab
-
SHA256
d4c49d31ca3aee3851b3996b5911583f700dc164ec75b56ec721f8b4aedc554b
-
SHA512
f70ae0e48b70ec29eaff0ca3c1f8ddb107619e0510c53a418d5f146373920aae84cefe75d31e2438b2a57c61a78cdba4185d489f78852e228e4f514d9e3b75fc
-
SSDEEP
3072:uJfuq8IzyLHID/p8iJDAAkRcpm1Kcwdx8MEqRhlQaBkcHTZlhAJzdyk:uuq1yy/pjnkWcLQQiHZ+zv
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2200-0-0x0000000000400000-0x0000000000418000-memory.dmp upx behavioral1/files/0x0008000000015c3e-5.dat upx behavioral1/memory/2200-18-0x0000000000400000-0x0000000000418000-memory.dmp upx -
Drops file in Windows directory 17 IoCs
description ioc Process File created C:\Windows\win32dc\Doom 3 + cdfix.exe NEAS.8a8837075245ff977b6f33faada202f0_JC.exe File created C:\Windows\win32dc\DAoC(hack).exe NEAS.8a8837075245ff977b6f33faada202f0_JC.exe File created C:\Windows\win32dc\Silent Hill 4 + trainer.exe NEAS.8a8837075245ff977b6f33faada202f0_JC.exe File created C:\Windows\win32dc\BattleField 1942_nocd.exe NEAS.8a8837075245ff977b6f33faada202f0_JC.exe File created C:\Windows\win32dc\Half-Life 2(fix).exe NEAS.8a8837075245ff977b6f33faada202f0_JC.exe File opened for modification C:\Windows\win32dc\Half-Life 2(fix).exe NEAS.8a8837075245ff977b6f33faada202f0_JC.exe File created C:\Windows\win32dc\UT2004 + cdfix.exe NEAS.8a8837075245ff977b6f33faada202f0_JC.exe File created C:\Windows\win32dc\BattleField 1942(crack).exe NEAS.8a8837075245ff977b6f33faada202f0_JC.exe File opened for modification C:\Windows\win32dc\BattleField 1942(crack).exe NEAS.8a8837075245ff977b6f33faada202f0_JC.exe File created C:\Windows\win32dc\Doom 3 + serial.exe NEAS.8a8837075245ff977b6f33faada202f0_JC.exe File opened for modification C:\Windows\win32dc\BattleField 1942_nocd.exe NEAS.8a8837075245ff977b6f33faada202f0_JC.exe File created C:\Windows\win32dc\Silent Hill 4_cdfix.exe NEAS.8a8837075245ff977b6f33faada202f0_JC.exe File created C:\Windows\win32dc\UT2004(crack).exe NEAS.8a8837075245ff977b6f33faada202f0_JC.exe File opened for modification C:\Windows\win32dc\Doom 3 + serial.exe NEAS.8a8837075245ff977b6f33faada202f0_JC.exe File opened for modification C:\Windows\win32dc\Silent Hill 4_cdfix.exe NEAS.8a8837075245ff977b6f33faada202f0_JC.exe File opened for modification C:\Windows\win32dc\DAoC(hack).exe NEAS.8a8837075245ff977b6f33faada202f0_JC.exe File opened for modification C:\Windows\win32dc\Silent Hill 4 + trainer.exe NEAS.8a8837075245ff977b6f33faada202f0_JC.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
186KB
MD5aec612c6e7470502f51ba35988c2d27b
SHA11d62e90bd5cc993fab1aa5dc93a009176dd66a21
SHA256fb0ce62db63018021f547a0f6c43ea8ad60e510266431e3dbcc7eb8e844d8036
SHA5125763442fead4e312f55d17301c7684072d92f5650aeb93775669b2d45fb711209c06f0f517fdb2be0f692cacb7d114ea0811d2428a239ff257280528cdfe1372