Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.a79c845c357267723fc32dea4d656c90.exe

  • Size

    529KB

  • Sample

    231117-gswpkafh95

  • MD5

    a79c845c357267723fc32dea4d656c90

  • SHA1

    ef75add0ffb8b945f1e19e26e496d70861f8ebd8

  • SHA256

    c2d884fa396e176db451060e738e4110b392a96ea25803e7979e96e67e99a602

  • SHA512

    26eb3fc7fbc9fb43a8c4d6af2e422917e396514e8da7a6eb0cc57192ef9cc8c31b60ebaeca52a533bd12562736b89e1f558b66f60fa90e6b04c120074fc932fc

  • SSDEEP

    12288:3wfoYpIpV6yYPkqi8apV6yYPqRgpV6yYPkqi8apV6yYP:3ePIWkzrWqWWkzrW

Score
10/10

Malware Config

Targets

    • Target

      NEAS.a79c845c357267723fc32dea4d656c90.exe

    • Size

      529KB

    • MD5

      a79c845c357267723fc32dea4d656c90

    • SHA1

      ef75add0ffb8b945f1e19e26e496d70861f8ebd8

    • SHA256

      c2d884fa396e176db451060e738e4110b392a96ea25803e7979e96e67e99a602

    • SHA512

      26eb3fc7fbc9fb43a8c4d6af2e422917e396514e8da7a6eb0cc57192ef9cc8c31b60ebaeca52a533bd12562736b89e1f558b66f60fa90e6b04c120074fc932fc

    • SSDEEP

      12288:3wfoYpIpV6yYPkqi8apV6yYPqRgpV6yYPkqi8apV6yYP:3ePIWkzrWqWWkzrW

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks