Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 02:59

General

  • Target

    55e2b33e3a0960c4dba0917b9a298af0_NEAS.exe

  • Size

    83KB

  • MD5

    55e2b33e3a0960c4dba0917b9a298af0

  • SHA1

    7c4942f6c9a712d7404e6e7c9f5466468dd54057

  • SHA256

    4f6a05618f7dceeb6e9a356410c0532cdd97dca7580609079693c3128ddd25b8

  • SHA512

    7a8adaaa1e06f899c07d61ec3face02faa7472aaf054126b25cf40d91082ff223ad48e1eb7566d78d527cf02ce706ea5b8bc8ef24a8769a9866b8b8f92d40734

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+qK:LJ0TAz6Mte4A+aaZx8EnCGVuq

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\55e2b33e3a0960c4dba0917b9a298af0_NEAS.exe
    "C:\Users\Admin\AppData\Local\Temp\55e2b33e3a0960c4dba0917b9a298af0_NEAS.exe"
    1⤵
      PID:2192

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-euAQ80MUHA8JA25o.exe

      Filesize

      83KB

      MD5

      d4fb8def263a8c2724f9305641212d56

      SHA1

      20ae23c41b221e46521693ed8c384317b86cc627

      SHA256

      ee6af6f3c4c1f7edd5bf7a68ef72241dfb8ebb6700ef2a36363240f599ccfc04

      SHA512

      f992d53e9a7c4e94ba79a8ee39b4e23029fc8ffce588157f815e01ba21a172e286808e11ca2153f2d0ce1ba782b12f3a7c5c35344850850b4d604b28420ffee7

    • memory/2192-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2192-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2192-7-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2192-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2192-21-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2192-28-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB