Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

NEAS.bdf80...80.exe

windows7-x64

9

NEAS.bdf80...80.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.bdf80f2eabb2ce9dc137564c85e22f80.exe

  • Size

    177KB

  • Sample

    231115-hedghadf66

  • MD5

    bdf80f2eabb2ce9dc137564c85e22f80

  • SHA1

    ab85c955d11bcc4dd0fe65a0b77212f541101bbf

  • SHA256

    75d685eeb837471023b582bb170a3015bf5c8b9c9e0f51f5a7cb13ecb5c51aa1

  • SHA512

    4ca54f3ee774118b2e7cc2b89ea7067bff9a5fa188acb5c9709db408e52bd0ca7f741c59a618a465f1393930034715b59ff5455cd8567154369116c3363ec87d

  • SSDEEP

    3072:6e7WpMNca3rytOkWpXfnYRl2l/9HSFHzJ0lBArR:RqKB+tOkWKR0iJ00

Score
9/10
ransomware

Malware Config

Targets

    • Target

      NEAS.bdf80f2eabb2ce9dc137564c85e22f80.exe

    • Size

      177KB

    • MD5

      bdf80f2eabb2ce9dc137564c85e22f80

    • SHA1

      ab85c955d11bcc4dd0fe65a0b77212f541101bbf

    • SHA256

      75d685eeb837471023b582bb170a3015bf5c8b9c9e0f51f5a7cb13ecb5c51aa1

    • SHA512

      4ca54f3ee774118b2e7cc2b89ea7067bff9a5fa188acb5c9709db408e52bd0ca7f741c59a618a465f1393930034715b59ff5455cd8567154369116c3363ec87d

    • SSDEEP

      3072:6e7WpMNca3rytOkWpXfnYRl2l/9HSFHzJ0lBArR:RqKB+tOkWKR0iJ00

    Score
    9/10
    ransomware

    • Renames multiple (431) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Renames multiple (837) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks