Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

NEAS.595f9...JC.exe

windows7-x64

7

NEAS.595f9...JC.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.595f976c60840cc03db18176bca7cc40_JC.exe

  • Size

    5.6MB

  • Sample

    231105-wca59abe25

  • MD5

    595f976c60840cc03db18176bca7cc40

  • SHA1

    15aec164fb7ca6cbc4f9e2b165aa8947e31a5793

  • SHA256

    1bcd53dc0799a40c0cc709e29aef1f8bdda91f538eb3bdf880564987a22b6223

  • SHA512

    9c9e7f10f3a98942cd150c26abc8b7ecd01dc83bf36a295fff9f329cd25f98ed9527fc9006aa8ae4ae96566c3a875006fdc3d69c67b932a6eb04e27091ec105c

  • SSDEEP

    98304:RiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:wRm1syxacY48eda2TMpQdZ9nc+fyhNjG

Score
7/10
discovery

Malware Config

Targets

    • Target

      NEAS.595f976c60840cc03db18176bca7cc40_JC.exe

    • Size

      5.6MB

    • MD5

      595f976c60840cc03db18176bca7cc40

    • SHA1

      15aec164fb7ca6cbc4f9e2b165aa8947e31a5793

    • SHA256

      1bcd53dc0799a40c0cc709e29aef1f8bdda91f538eb3bdf880564987a22b6223

    • SHA512

      9c9e7f10f3a98942cd150c26abc8b7ecd01dc83bf36a295fff9f329cd25f98ed9527fc9006aa8ae4ae96566c3a875006fdc3d69c67b932a6eb04e27091ec105c

    • SSDEEP

      98304:RiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:wRm1syxacY48eda2TMpQdZ9nc+fyhNjG

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks