Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
5217458b40ac645e0f9160500311f5777e4c2c040ae817275894b375dba929db
-
Size
1.5MB
-
Sample
240504-283s2ahh74
-
MD5
3193dcd08e482ffb0e5bccc448624110
-
SHA1
44c63a9a7ccdb3e80c8ca69512578672e74d2f26
-
SHA256
5217458b40ac645e0f9160500311f5777e4c2c040ae817275894b375dba929db
-
SHA512
48b902133c11258ba713296c80a1edd83743fc0f93b60b8a750f43c414177634b74009e2e20de145a129bddfd8eb4ec88de93067bb9c2a0419e18e47245699ba
-
SSDEEP
24576:yVaUxZu7kzfyeU2DGU8b78BP8zQJ6+FVckwIfub7yxDiXTUL1lT2yxGQW6L3P:y847zfyh86cJ6/IfzWXTUDT2kGZ4P
Behavioral task
behavioral1
Sample
5217458b40ac645e0f9160500311f5777e4c2c040ae817275894b375dba929db.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5217458b40ac645e0f9160500311f5777e4c2c040ae817275894b375dba929db.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
5217458b40ac645e0f9160500311f5777e4c2c040ae817275894b375dba929db
-
Size
1.5MB
-
MD5
3193dcd08e482ffb0e5bccc448624110
-
SHA1
44c63a9a7ccdb3e80c8ca69512578672e74d2f26
-
SHA256
5217458b40ac645e0f9160500311f5777e4c2c040ae817275894b375dba929db
-
SHA512
48b902133c11258ba713296c80a1edd83743fc0f93b60b8a750f43c414177634b74009e2e20de145a129bddfd8eb4ec88de93067bb9c2a0419e18e47245699ba
-
SSDEEP
24576:yVaUxZu7kzfyeU2DGU8b78BP8zQJ6+FVckwIfub7yxDiXTUL1lT2yxGQW6L3P:y847zfyh86cJ6/IfzWXTUDT2kGZ4P
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-