Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/05/2024, 02:59

General

  • Target

    55e2b33e3a0960c4dba0917b9a298af0_NEAS.exe

  • Size

    83KB

  • MD5

    55e2b33e3a0960c4dba0917b9a298af0

  • SHA1

    7c4942f6c9a712d7404e6e7c9f5466468dd54057

  • SHA256

    4f6a05618f7dceeb6e9a356410c0532cdd97dca7580609079693c3128ddd25b8

  • SHA512

    7a8adaaa1e06f899c07d61ec3face02faa7472aaf054126b25cf40d91082ff223ad48e1eb7566d78d527cf02ce706ea5b8bc8ef24a8769a9866b8b8f92d40734

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+qK:LJ0TAz6Mte4A+aaZx8EnCGVuq

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\55e2b33e3a0960c4dba0917b9a298af0_NEAS.exe
    "C:\Users\Admin\AppData\Local\Temp\55e2b33e3a0960c4dba0917b9a298af0_NEAS.exe"
    1⤵
      PID:2472

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-xO2lkmtGFTbFc806.exe

      Filesize

      83KB

      MD5

      14ccf35d452ecb8f1f6c876e769f829b

      SHA1

      4c22b00fb1d7da23e78662c88d13bfa7585b7f7c

      SHA256

      58ebb67ad82304983f4e4711851a6b04f9fdfc63f7e6758ccc59d53ac31ab62c

      SHA512

      2b42ef2950c3a641233cd3eb1b23e070447b9df9b7791fb4e21a27b3e3146527d571d0eecdadb8957d9bdbebd47bb845efec873306c5bb3912b1e9a8b817dac7

    • memory/2472-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2472-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2472-7-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2472-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2472-21-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2472-28-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB