Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.28d90fe7adfe7b88d02eef8d56ad5480_JC.exe

  • Size

    1.9MB

  • Sample

    231105-c3sy7sbg44

  • MD5

    28d90fe7adfe7b88d02eef8d56ad5480

  • SHA1

    60db7bb136005841f6c41da55f1dba7997f57fa7

  • SHA256

    bcf36a8473d6692a1f2d4e7379fd7052d0ee0ac763f800c380435adfb7e185ba

  • SHA512

    15b4885b0d2f6e7bbfcc8a0bff441672adec77797b671d7762296d439be912cbbfe3d66c366a20526fa5fae5ea86f577bde6d7a13e3c24eb9c82ca347af5daac

  • SSDEEP

    24576:otkrygP5ykrydo5ykryeU5ykrydo5ykry:tvtat

Score
10/10

Malware Config

Targets

    • Target

      NEAS.28d90fe7adfe7b88d02eef8d56ad5480_JC.exe

    • Size

      1.9MB

    • MD5

      28d90fe7adfe7b88d02eef8d56ad5480

    • SHA1

      60db7bb136005841f6c41da55f1dba7997f57fa7

    • SHA256

      bcf36a8473d6692a1f2d4e7379fd7052d0ee0ac763f800c380435adfb7e185ba

    • SHA512

      15b4885b0d2f6e7bbfcc8a0bff441672adec77797b671d7762296d439be912cbbfe3d66c366a20526fa5fae5ea86f577bde6d7a13e3c24eb9c82ca347af5daac

    • SSDEEP

      24576:otkrygP5ykrydo5ykryeU5ykrydo5ykry:tvtat

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks