Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
05/11/2023, 02:44
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0461c66b46640823d38b5112983cae60_JC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.0461c66b46640823d38b5112983cae60_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.0461c66b46640823d38b5112983cae60_JC.exe
-
Size
391KB
-
MD5
0461c66b46640823d38b5112983cae60
-
SHA1
85c86bb98e905114923e1ce11305a0d2a715da65
-
SHA256
978362229a73d703cf6d3536e09abec9a518d0916b1ceac0bba03c468495e31c
-
SHA512
727ef35c8c951495b342587a49ae16cdd5deaa6e398ed572cd3c2c6a7e5239622c993d121ba0a88bda08894024b84b9cfff6ff27e89e402e1f3d70a9775aba5a
-
SSDEEP
6144:0Gyw99vtxI7XzzQoRXdla8To8maHHko/9FsHbtR28mI1dY0:w4vt6bXQoRXdlHToQnl9OH2NID
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
pid Process 3976 NEAS.0461c66b46640823d38b5112983cae60_JC.exe 3976 NEAS.0461c66b46640823d38b5112983cae60_JC.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3976 NEAS.0461c66b46640823d38b5112983cae60_JC.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3976 NEAS.0461c66b46640823d38b5112983cae60_JC.exe 3976 NEAS.0461c66b46640823d38b5112983cae60_JC.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
264KB
MD5b795e14dcb8b6f9f79c459c033cc5218
SHA1337d7e4d738dcfc54bda89c76857d834b4fc937a
SHA2566f952d44fef31c1ea27ec812a6102dda47529a9c14589ca36e6d27f67565d905
SHA512d93b1d3b5351f97b0af91589378f9b4733efb13510531cdd58936f8bd0bdc4d8ad9a613dea3a023d77e516dca40fe87e729346fd7825e0e30ab71a8dcf665e4f
-
Filesize
264KB
MD5b795e14dcb8b6f9f79c459c033cc5218
SHA1337d7e4d738dcfc54bda89c76857d834b4fc937a
SHA2566f952d44fef31c1ea27ec812a6102dda47529a9c14589ca36e6d27f67565d905
SHA512d93b1d3b5351f97b0af91589378f9b4733efb13510531cdd58936f8bd0bdc4d8ad9a613dea3a023d77e516dca40fe87e729346fd7825e0e30ab71a8dcf665e4f