Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.5cb19c52551c16f1368ce8020a486e10.exe

  • Size

    1.2MB

  • Sample

    231105-x7eycsba91

  • MD5

    5cb19c52551c16f1368ce8020a486e10

  • SHA1

    6f0380962db98fceffa120cb429917b352429c0d

  • SHA256

    f3ba6b26825e1e992a4053f15d4629a71b83e35adb9b9b865ad1213b6d05ce8c

  • SHA512

    608d737ad1b99beb251fd18e3e6666b29ed2528c145f19367cae46d42aee09f96edec8646f672c31c155fad924f7011ea66dec6762d1fcaab48b016cc5fa2dff

  • SSDEEP

    24576:7r4gpoQC7QNOkRmnhY8Nb3SXm9+8+UTSMF/BAo5u1tU1oYf8NIV0Kg:/7+s0hqW9T9pF/BA/tU1Rf8NIW

Malware Config

Targets

    • Target

      NEAS.5cb19c52551c16f1368ce8020a486e10.exe

    • Size

      1.2MB

    • MD5

      5cb19c52551c16f1368ce8020a486e10

    • SHA1

      6f0380962db98fceffa120cb429917b352429c0d

    • SHA256

      f3ba6b26825e1e992a4053f15d4629a71b83e35adb9b9b865ad1213b6d05ce8c

    • SHA512

      608d737ad1b99beb251fd18e3e6666b29ed2528c145f19367cae46d42aee09f96edec8646f672c31c155fad924f7011ea66dec6762d1fcaab48b016cc5fa2dff

    • SSDEEP

      24576:7r4gpoQC7QNOkRmnhY8Nb3SXm9+8+UTSMF/BAo5u1tU1oYf8NIV0Kg:/7+s0hqW9T9pF/BA/tU1Rf8NIW

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks