Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.738d59b32f186eef1013c2d601fe594d.exe

  • Size

    222KB

  • Sample

    231114-kfrfvsac82

  • MD5

    738d59b32f186eef1013c2d601fe594d

  • SHA1

    2ecf461206e2820376f2198a1dfc56ea4e34a7aa

  • SHA256

    80da0123b226af3acefffd1c424ecba9ba9a76862f6725f6c80c883e51a94305

  • SHA512

    4bb6bc830b07ab9d406da75303b48ae823d8cfb697166defd05b4db8035de3ca1396ff12ecbc7da8200db6da9ba5b4634b8ea12693513c443a399ef0847281df

  • SSDEEP

    6144:PiLI80DwbWGRdA6sQc/Yp7TVX3J/1awbWGRdA6sQc/Y:F8HbWGRdA6sQhPbWGRdA6sQ

Score
10/10

Malware Config

Targets

    • Target

      NEAS.738d59b32f186eef1013c2d601fe594d.exe

    • Size

      222KB

    • MD5

      738d59b32f186eef1013c2d601fe594d

    • SHA1

      2ecf461206e2820376f2198a1dfc56ea4e34a7aa

    • SHA256

      80da0123b226af3acefffd1c424ecba9ba9a76862f6725f6c80c883e51a94305

    • SHA512

      4bb6bc830b07ab9d406da75303b48ae823d8cfb697166defd05b4db8035de3ca1396ff12ecbc7da8200db6da9ba5b4634b8ea12693513c443a399ef0847281df

    • SSDEEP

      6144:PiLI80DwbWGRdA6sQc/Yp7TVX3J/1awbWGRdA6sQc/Y:F8HbWGRdA6sQhPbWGRdA6sQ

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks