Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.ccaa574520494925408d00ad162e4860.exe

  • Size

    174KB

  • Sample

    231112-ynnltsbf46

  • MD5

    ccaa574520494925408d00ad162e4860

  • SHA1

    1016088dade81f0e54a1a9a42a4c587a7a5be3b3

  • SHA256

    eb91bf1c0312adbcd78cca568bdfed7f69b87f08b268ecbd437a3d4e6e4b5770

  • SHA512

    edcf4001761bb9695e558f666833bd66055d8a483ff3c9601e078f8ffc6b784d61ddb893152f65f465c8a3b55e70d41b20f76b3773863d5a0472b74c37b8b83d

  • SSDEEP

    3072:Pn08amQaf1uwjK56y+lLeAh7DxSvITW/cbFGS92TlTTtttSneicdq:88a/ouwjK565lSAdhCw92TlTTttt5D

Score
10/10

Malware Config

Targets

    • Target

      NEAS.ccaa574520494925408d00ad162e4860.exe

    • Size

      174KB

    • MD5

      ccaa574520494925408d00ad162e4860

    • SHA1

      1016088dade81f0e54a1a9a42a4c587a7a5be3b3

    • SHA256

      eb91bf1c0312adbcd78cca568bdfed7f69b87f08b268ecbd437a3d4e6e4b5770

    • SHA512

      edcf4001761bb9695e558f666833bd66055d8a483ff3c9601e078f8ffc6b784d61ddb893152f65f465c8a3b55e70d41b20f76b3773863d5a0472b74c37b8b83d

    • SSDEEP

      3072:Pn08amQaf1uwjK56y+lLeAh7DxSvITW/cbFGS92TlTTtttSneicdq:88a/ouwjK565lSAdhCw92TlTTttt5D

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks