Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.0616ca1b087613b888563d5a0178bc62.exe

  • Size

    285KB

  • Sample

    231106-xdmfcaef66

  • MD5

    0616ca1b087613b888563d5a0178bc62

  • SHA1

    6cfbc25ca41bc170636422af7e8594c3411d3692

  • SHA256

    08aa2b56dbf9ab32ff13fea77f449f0d35ebbb4b908faea0ca7dc2535bec8fc6

  • SHA512

    fedacb6625c6a60d0e1e32ab99436567a82155a16000c88629b5b3f0aaa0f6cc0dc85604b5927b6a64b212321f9780a648964fdee323ca733df74e907b419618

  • SSDEEP

    3072:tz8DlkUvsn2kkXP1nJEe1KVcbMloVRr3uMg0kAqSxYiJ2QM4GKch:KD2/e1KQIoi7tWa

Score
10/10

Malware Config

Targets

    • Target

      NEAS.0616ca1b087613b888563d5a0178bc62.exe

    • Size

      285KB

    • MD5

      0616ca1b087613b888563d5a0178bc62

    • SHA1

      6cfbc25ca41bc170636422af7e8594c3411d3692

    • SHA256

      08aa2b56dbf9ab32ff13fea77f449f0d35ebbb4b908faea0ca7dc2535bec8fc6

    • SHA512

      fedacb6625c6a60d0e1e32ab99436567a82155a16000c88629b5b3f0aaa0f6cc0dc85604b5927b6a64b212321f9780a648964fdee323ca733df74e907b419618

    • SSDEEP

      3072:tz8DlkUvsn2kkXP1nJEe1KVcbMloVRr3uMg0kAqSxYiJ2QM4GKch:KD2/e1KQIoi7tWa

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks