Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
30s -
max time network
70s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
04/11/2023, 11:53
General
-
Target
NEAS.5def1dfc96cf89abda6747f3f24fdec0.exe
-
Size
181KB
-
MD5
5def1dfc96cf89abda6747f3f24fdec0
-
SHA1
9adc82885fb973641580d24dd3f0fd95d1486d8a
-
SHA256
b43522bb6e35052123378ebf6cfe017c0dace4430c71cad89b6d90e7cde5f4c8
-
SHA512
1983be05987cdb16fefd73cee7dcd9e18d2791950e14c74d9de5a3c0debc7ad182c2e7330f69327339260843892275df2cd32b823b120333ec39e6a0a5158879
-
SSDEEP
3072:YG9WdoX/14GwN+iHhK/xYHeAvG4HTQSKsTRbjpu5kS6AF+mheuxRO0Vrs:D9WG14GWx2xYnIstbjgHESeuz5s
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.5def1dfc96cf89abda6747f3f24fdec0.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.5def1dfc96cf89abda6747f3f24fdec0.exe"1⤵
- Drops file in Program Files directory
-
C:\PROGRA~3\Mozilla\yqzqgud.exeC:\PROGRA~3\Mozilla\yqzqgud.exe -ikphvdj1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
129KB
MD5e4bfdf6cd550624b835eeb94a680949c
SHA1763753a8d8a9237e50b6d4803cbedaf9b993b11c
SHA256b62c9b9424a1388064cb452ef6d3af7f17a6bcf5e7bfa3b86478e0a0eabde594
SHA512db7cd3199e1a79a0210463b7387f3deef8497b8cec88a051dccd4b9e04a8a9f5a02b3d2f030deccf10316e151b2f2789e1b5f0b5c8aeb2e109fd42b56f180561
-
Filesize
181KB
MD542b3e96f650236c13b1fc8586df38387
SHA1417f1e55da28df224cd1685948be409cdddb931f
SHA2561a45d80a09d342dd42bd45b3f9d83739ee68691832cb76181a5489e5a053bc73
SHA512a16eabad6dd19624a7b59ea0fcffcd2f5dea5a841bd820b79da6a0a542ee27c65093164b2db3d7bf9a6d4bc19a44cb53bcc723a4820ac8793cea9eb3817aee0a
-
Filesize
200KB
-
Filesize
364KB
-
Filesize
200KB