Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ee38af76c24dc30cfa435e14ec275b5d.exe
-
Size
152KB
-
Sample
231230-xhdzrsbbgp
-
MD5
ee38af76c24dc30cfa435e14ec275b5d
-
SHA1
7927d07e9207963ccb2e08ad3ae076a6970bddb0
-
SHA256
2b98b5ed97369a3addf8a0ae5563831d2c058e3c999dbe72a135c2dbb6872732
-
SHA512
6fdbfb0bac5f163c9b2fb2ce7a6e21aeac679893bbf5f22e29f36c7893773a13f0b499e7296052ce61210f5063e9dbd9bca1a53205ae3e6464d946a69f239011
-
SSDEEP
1536:JxqjQ+P04wsmJC3tOyadoNr6XiR65x077U2v4a1khoFfh9epLOZ6oX0McTIE1tXM:sr85C81VyU2vZ1QodDeoX4IE1ssdG
Behavioral task
behavioral1
Sample
ee38af76c24dc30cfa435e14ec275b5d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ee38af76c24dc30cfa435e14ec275b5d.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
ee38af76c24dc30cfa435e14ec275b5d.exe
-
Size
152KB
-
MD5
ee38af76c24dc30cfa435e14ec275b5d
-
SHA1
7927d07e9207963ccb2e08ad3ae076a6970bddb0
-
SHA256
2b98b5ed97369a3addf8a0ae5563831d2c058e3c999dbe72a135c2dbb6872732
-
SHA512
6fdbfb0bac5f163c9b2fb2ce7a6e21aeac679893bbf5f22e29f36c7893773a13f0b499e7296052ce61210f5063e9dbd9bca1a53205ae3e6464d946a69f239011
-
SSDEEP
1536:JxqjQ+P04wsmJC3tOyadoNr6XiR65x077U2v4a1khoFfh9epLOZ6oX0McTIE1tXM:sr85C81VyU2vZ1QodDeoX4IE1ssdG
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Modifies system executable filetype association
-