Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
07/05/2024, 02:59
Behavioral task
behavioral1
Sample
55e2b33e3a0960c4dba0917b9a298af0_NEAS.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
55e2b33e3a0960c4dba0917b9a298af0_NEAS.exe
Resource
win10v2004-20240426-en
General
-
Target
55e2b33e3a0960c4dba0917b9a298af0_NEAS.exe
-
Size
83KB
-
MD5
55e2b33e3a0960c4dba0917b9a298af0
-
SHA1
7c4942f6c9a712d7404e6e7c9f5466468dd54057
-
SHA256
4f6a05618f7dceeb6e9a356410c0532cdd97dca7580609079693c3128ddd25b8
-
SHA512
7a8adaaa1e06f899c07d61ec3face02faa7472aaf054126b25cf40d91082ff223ad48e1eb7566d78d527cf02ce706ea5b8bc8ef24a8769a9866b8b8f92d40734
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+qK:LJ0TAz6Mte4A+aaZx8EnCGVuq
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2192-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2192-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2192-7-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/files/0x0004000000004ed7-11.dat upx behavioral1/memory/2192-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2192-21-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2192-28-0x0000000000400000-0x000000000042A000-memory.dmp upx
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD5d4fb8def263a8c2724f9305641212d56
SHA120ae23c41b221e46521693ed8c384317b86cc627
SHA256ee6af6f3c4c1f7edd5bf7a68ef72241dfb8ebb6700ef2a36363240f599ccfc04
SHA512f992d53e9a7c4e94ba79a8ee39b4e23029fc8ffce588157f815e01ba21a172e286808e11ca2153f2d0ce1ba782b12f3a7c5c35344850850b4d604b28420ffee7