Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    181s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    04/11/2023, 12:04

General

  • Target

    NEAS.62b8f97e157876087f43b5096a8bda00.exe

  • Size

    103KB

  • MD5

    62b8f97e157876087f43b5096a8bda00

  • SHA1

    a011cce6121d09b085df5214b3bb68a32e82889d

  • SHA256

    4114b07816556643bea1953ee9923c61614342971388f2c63ae104e91471d361

  • SHA512

    b01f501c11aa2b4d399b923e9032128754d9168cb707c0589663013e14ea175dba73df401fc1ecc5e9dd2e30676e92786de65d3a0e4ce03fb4ffae323451d02a

  • SSDEEP

    1536:4aiqH1s+kCtrA2UMT0mTFibDKa1Xohs60VHRxc17TJIbas6SebVurUMM8:51B31bdBob2QXowVHCqT6S6AUMM8

Score
10/10

Malware Config

Signatures

  • Modifies WinLogon for persistence 2 TTPs 1 IoCs
  • Drops file in System32 directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.62b8f97e157876087f43b5096a8bda00.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.62b8f97e157876087f43b5096a8bda00.exe"
    1⤵
    • Modifies WinLogon for persistence
    • Drops file in System32 directory
    PID:2728

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\xdccPrograms\7zG.exe

    Filesize

    568KB

    MD5

    fe795fe0d6ddb8a0f462c3cd713fc662

    SHA1

    bfc7359433d98fda8a267bc535bc3698101b18a3

    SHA256

    3415f0dcec61ac6e8d388e25cc0fc819c6f8a4513b81519c8d399680fbf916ee

    SHA512

    022f0038b454482bad7009257e17c5e4e7edfe5707ea68940b668196eafcfa77cf1a1b320e2d7303bd8313d792f3ba86a8da7bcf3f085aebe0e35a4bb7ce2123

  • memory/2728-25-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB

  • memory/2728-26-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB

  • memory/2728-29-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB

  • memory/2728-36-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB

  • memory/2728-39-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB

  • memory/2728-129-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB

  • memory/2728-130-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB

  • memory/2728-131-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB

  • memory/2728-132-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB

  • memory/2728-133-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB

  • memory/2728-134-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB

  • memory/2728-135-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB

  • memory/2728-136-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB

  • memory/2728-137-0x0000000000400000-0x0000000000416000-memory.dmp

    Filesize

    88KB