Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.c848fbc1a823833e2c0218f4ef8375d0.exe

  • Size

    427KB

  • Sample

    231113-bcm5laeg4s

  • MD5

    c848fbc1a823833e2c0218f4ef8375d0

  • SHA1

    114e36eebf52d05db5342b27c17775414800d0be

  • SHA256

    c5654ef664142d08165354ecbfd37e212d624826f14040e9c0f0a959c3515596

  • SHA512

    6995622d0ff485b8ad65ba1e8c303440ba27b4ffff6213a410f83946e4432f0bdfaef1934dd2f1b37c42f8e6d8a657f7c6e46d37576db99c7477cd2e399faba1

  • SSDEEP

    6144:/CQ9NiZVISTYaT15f7o+STYaT15fAK8yfMx/D4LJZPlVcxqy1:/LXQTYapJoTYapz8ye49vWq

Score
10/10

Malware Config

Targets

    • Target

      NEAS.c848fbc1a823833e2c0218f4ef8375d0.exe

    • Size

      427KB

    • MD5

      c848fbc1a823833e2c0218f4ef8375d0

    • SHA1

      114e36eebf52d05db5342b27c17775414800d0be

    • SHA256

      c5654ef664142d08165354ecbfd37e212d624826f14040e9c0f0a959c3515596

    • SHA512

      6995622d0ff485b8ad65ba1e8c303440ba27b4ffff6213a410f83946e4432f0bdfaef1934dd2f1b37c42f8e6d8a657f7c6e46d37576db99c7477cd2e399faba1

    • SSDEEP

      6144:/CQ9NiZVISTYaT15f7o+STYaT15fAK8yfMx/D4LJZPlVcxqy1:/LXQTYapJoTYapz8ye49vWq

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks