Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
72d408c13906f8ef15a849e9fd26fcd60ea11e175adfe436d2d4e6a1aef169d4
-
Size
116KB
-
Sample
240424-vzcrxsdh3s
-
MD5
5fc7f95284c4f28f2d73fd86ade14d71
-
SHA1
33ed0e7ac6a7e0a3eb496b614e5ae72f13a4cd1d
-
SHA256
72d408c13906f8ef15a849e9fd26fcd60ea11e175adfe436d2d4e6a1aef169d4
-
SHA512
4ba0b183a6e8a275c29781837db6bd50ea6c9f04bb30af024b872d96f8a01c5226a98ac2f27313d1f5fbb07bba82007c74445b9845209bc8e8defa6a1ac9d228
-
SSDEEP
1536:JxqjQ+P04wsmJCbKTpGWzFPPvUFU77Q95fIDAXzVl7xnzBwCURPMbCIuwBWWG2F+:sr85CGzFPPninxzBYR09WwDS
Behavioral task
behavioral1
Sample
72d408c13906f8ef15a849e9fd26fcd60ea11e175adfe436d2d4e6a1aef169d4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
72d408c13906f8ef15a849e9fd26fcd60ea11e175adfe436d2d4e6a1aef169d4.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
72d408c13906f8ef15a849e9fd26fcd60ea11e175adfe436d2d4e6a1aef169d4
-
Size
116KB
-
MD5
5fc7f95284c4f28f2d73fd86ade14d71
-
SHA1
33ed0e7ac6a7e0a3eb496b614e5ae72f13a4cd1d
-
SHA256
72d408c13906f8ef15a849e9fd26fcd60ea11e175adfe436d2d4e6a1aef169d4
-
SHA512
4ba0b183a6e8a275c29781837db6bd50ea6c9f04bb30af024b872d96f8a01c5226a98ac2f27313d1f5fbb07bba82007c74445b9845209bc8e8defa6a1ac9d228
-
SSDEEP
1536:JxqjQ+P04wsmJCbKTpGWzFPPvUFU77Q95fIDAXzVl7xnzBwCURPMbCIuwBWWG2F+:sr85CGzFPPninxzBYR09WwDS
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-