Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.01257740b920228e9f70bf1819f91950.exe
-
Size
176KB
-
Sample
231104-qfv2yacd54
-
MD5
01257740b920228e9f70bf1819f91950
-
SHA1
491bc71fc4ccd8b9a80e11aea17a1bb95a0dc49e
-
SHA256
2f41979ab67b2c8f739147cefcb41008a18e902ee8b531c3017fdbcd1c41291f
-
SHA512
2967ea5af7d9a60994aa11ac1f1125165f207ff5e9a5941fb7e9ff35a6c55ed068db86fa9919b01572bd7c168eaa8ed693b44426623f27ad019228d8bd81d71e
-
SSDEEP
3072:WjdkMa8usOxTBI/j6/aBI8uiSiZjGqMCB5dzaet9MbaWQRTymOS6wJ3kNf:HcAu2CBI8uR0My5Qw6KTy+6wJGf
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.01257740b920228e9f70bf1819f91950.exe
Resource
win7-20231023-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
NEAS.01257740b920228e9f70bf1819f91950.exe
-
Size
176KB
-
MD5
01257740b920228e9f70bf1819f91950
-
SHA1
491bc71fc4ccd8b9a80e11aea17a1bb95a0dc49e
-
SHA256
2f41979ab67b2c8f739147cefcb41008a18e902ee8b531c3017fdbcd1c41291f
-
SHA512
2967ea5af7d9a60994aa11ac1f1125165f207ff5e9a5941fb7e9ff35a6c55ed068db86fa9919b01572bd7c168eaa8ed693b44426623f27ad019228d8bd81d71e
-
SSDEEP
3072:WjdkMa8usOxTBI/j6/aBI8uiSiZjGqMCB5dzaet9MbaWQRTymOS6wJ3kNf:HcAu2CBI8uR0My5Qw6KTy+6wJGf
-
Modifies firewall policy service
-
Loads dropped DLL
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1