Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.1d7b56c942dc26f79b6bfc9365c0ff40.exe
-
Size
1.5MB
-
Sample
231115-ahxesaha38
-
MD5
1d7b56c942dc26f79b6bfc9365c0ff40
-
SHA1
7e04f04e2a3dc56a9d93a23ecbe3455fdaa09593
-
SHA256
42c3dada3db56a22688a3d6e0c44290f8d3213f2b623293009d59c37de3bf69e
-
SHA512
b12f5a12f0fc987a9b5bf29c0ff77b36cb1f99bf17c67e50a409561864a88f052a145701544db1bca6079ca7eb3cd3980368853dcec9d3b3b8aed22f0be7b4e1
-
SSDEEP
24576:oWfKIzIE9IL9Mo8q+hvDKEyL7u9oUG+A8FwMnLd7P496mxwhRuP3dNbno+w6qLsG:VfH49TZ+RDkfu9oF+/ZmahREnbfwDWzG
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.1d7b56c942dc26f79b6bfc9365c0ff40.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.1d7b56c942dc26f79b6bfc9365c0ff40.exe
Resource
win10v2004-20231023-en
Malware Config
Targets
-
-
Target
NEAS.1d7b56c942dc26f79b6bfc9365c0ff40.exe
-
Size
1.5MB
-
MD5
1d7b56c942dc26f79b6bfc9365c0ff40
-
SHA1
7e04f04e2a3dc56a9d93a23ecbe3455fdaa09593
-
SHA256
42c3dada3db56a22688a3d6e0c44290f8d3213f2b623293009d59c37de3bf69e
-
SHA512
b12f5a12f0fc987a9b5bf29c0ff77b36cb1f99bf17c67e50a409561864a88f052a145701544db1bca6079ca7eb3cd3980368853dcec9d3b3b8aed22f0be7b4e1
-
SSDEEP
24576:oWfKIzIE9IL9Mo8q+hvDKEyL7u9oUG+A8FwMnLd7P496mxwhRuP3dNbno+w6qLsG:VfH49TZ+RDkfu9oF+/ZmahREnbfwDWzG
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-