Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.5e6e5fe247e96c09a7297b32c31880847a6827762b9afdbb7d7b46e3c0071a91exe.exe

  • Size

    1.7MB

  • Sample

    231105-pyel8sgg55

  • MD5

    fee771c9a50a56880f6bce04874f6f5c

  • SHA1

    e5a9f281eb91405004cd4f347db7b5f23f8d6b8f

  • SHA256

    5e6e5fe247e96c09a7297b32c31880847a6827762b9afdbb7d7b46e3c0071a91

  • SHA512

    e1cb760ddc11d2eeba73fd5bd3baabcebc82c7f41ed9a7cc2d7e30bf527ac6aaf3593536a57c3ac546ecf29b1521764f0412062a811645d0bbcf739ca579f422

  • SSDEEP

    24576:3eHTg0cKA71b0+P7tT4o+AVDT2wEpXs+XFJP+jP2jetVS7cb6z54R7u9ud9Xu9cI:3TrTqAVm/JRX2IetVz6mRuaxt

Malware Config

Targets

    • Target

      NEAS.5e6e5fe247e96c09a7297b32c31880847a6827762b9afdbb7d7b46e3c0071a91exe.exe

    • Size

      1.7MB

    • MD5

      fee771c9a50a56880f6bce04874f6f5c

    • SHA1

      e5a9f281eb91405004cd4f347db7b5f23f8d6b8f

    • SHA256

      5e6e5fe247e96c09a7297b32c31880847a6827762b9afdbb7d7b46e3c0071a91

    • SHA512

      e1cb760ddc11d2eeba73fd5bd3baabcebc82c7f41ed9a7cc2d7e30bf527ac6aaf3593536a57c3ac546ecf29b1521764f0412062a811645d0bbcf739ca579f422

    • SSDEEP

      24576:3eHTg0cKA71b0+P7tT4o+AVDT2wEpXs+XFJP+jP2jetVS7cb6z54R7u9ud9Xu9cI:3TrTqAVm/JRX2IetVz6mRuaxt

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks