Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.12cc497094d0e39bf3ef5d87a4f6d690.exe

  • Size

    194KB

  • Sample

    231118-da42fahf65

  • MD5

    12cc497094d0e39bf3ef5d87a4f6d690

  • SHA1

    39b6425d9ac1aed247703a429cc54ddad5983374

  • SHA256

    4d5810a9a32eaa662f4131ae68409118f06f5b09bf5376daab5d72de3afc9b50

  • SHA512

    c69af01428192cd5008d28716747eb265e5b9c7bf202533d0bbb5b10bdf35495ac01c183ceae7186335536f78346b88e6a64c9292ab106c5443d70729efa0ea2

  • SSDEEP

    6144:wSOkryZBJhsdSfUNRbCeKpNYxWlJ7mkD6pNY:zriBJ

Score
10/10

Malware Config

Targets

    • Target

      NEAS.12cc497094d0e39bf3ef5d87a4f6d690.exe

    • Size

      194KB

    • MD5

      12cc497094d0e39bf3ef5d87a4f6d690

    • SHA1

      39b6425d9ac1aed247703a429cc54ddad5983374

    • SHA256

      4d5810a9a32eaa662f4131ae68409118f06f5b09bf5376daab5d72de3afc9b50

    • SHA512

      c69af01428192cd5008d28716747eb265e5b9c7bf202533d0bbb5b10bdf35495ac01c183ceae7186335536f78346b88e6a64c9292ab106c5443d70729efa0ea2

    • SSDEEP

      6144:wSOkryZBJhsdSfUNRbCeKpNYxWlJ7mkD6pNY:zriBJ

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks