Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    142s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/11/2023, 01:00

General

  • Target

    NEAS.042c8898a9ec400254f7c0944a4ae200_JC.exe

  • Size

    472KB

  • MD5

    042c8898a9ec400254f7c0944a4ae200

  • SHA1

    94298400bdd738a6de240498fa08c596b8ef5c6b

  • SHA256

    ef6274e8b1e7ea41aef56d251d70803a8a3b5d21df23c2e9b1155bde9874b5d3

  • SHA512

    ba20138a02f862ae2aa062068cd27b3e832159743b7a27ad05d78592bd9b70e34cd4560d49fc3257debf7efda7f36898be390e3883a60ff80d5bab5d911faec1

  • SSDEEP

    6144:Pdco2Ik+Zfc0u2hPFthsZILdgdco2Ik+Zfc0u2hPFthsZILd:PdcMK0uOFthscudcMK0uOFthsc

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 2 IoCs
  • Drops file in Windows directory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.042c8898a9ec400254f7c0944a4ae200_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.042c8898a9ec400254f7c0944a4ae200_JC.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Windows directory
    PID:4512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4512-0-0x0000000074670000-0x0000000074C21000-memory.dmp

    Filesize

    5.7MB

  • memory/4512-1-0x0000000074670000-0x0000000074C21000-memory.dmp

    Filesize

    5.7MB

  • memory/4512-2-0x00000000017B0000-0x00000000017C0000-memory.dmp

    Filesize

    64KB

  • memory/4512-6-0x0000000074670000-0x0000000074C21000-memory.dmp

    Filesize

    5.7MB