Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
67f9609896c1718bb76a8411eca36140_NEAS
-
Size
147KB
-
Sample
240507-e686pshh5w
-
MD5
67f9609896c1718bb76a8411eca36140
-
SHA1
3c2abc809c6df156e84f5d62c7672b5a6cb8ca8d
-
SHA256
e5ab86d874250d0aa0cad8b57764e506504b63f45ac367f15d7804855227ff85
-
SHA512
14a73d78af4f44532bdbdee7a2619a1114afb8fb9bd4d9e22e1a917e608ca4dbcc2ddd67d7e201d4519a1bbe638a98a608be6a73bd9496a1d636cde35023b47c
-
SSDEEP
1536:CTWn1++PJHJXA/OsIZfzc3/Q1pkMJ+ZGtK1+ZGtKQNMdTajOtGtU1wAIuZAIuJp:KQSo1EZGtKgZGtK/PgtU1wAIuZAIun
Behavioral task
behavioral1
Sample
67f9609896c1718bb76a8411eca36140_NEAS.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
67f9609896c1718bb76a8411eca36140_NEAS.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
67f9609896c1718bb76a8411eca36140_NEAS
-
Size
147KB
-
MD5
67f9609896c1718bb76a8411eca36140
-
SHA1
3c2abc809c6df156e84f5d62c7672b5a6cb8ca8d
-
SHA256
e5ab86d874250d0aa0cad8b57764e506504b63f45ac367f15d7804855227ff85
-
SHA512
14a73d78af4f44532bdbdee7a2619a1114afb8fb9bd4d9e22e1a917e608ca4dbcc2ddd67d7e201d4519a1bbe638a98a608be6a73bd9496a1d636cde35023b47c
-
SSDEEP
1536:CTWn1++PJHJXA/OsIZfzc3/Q1pkMJ+ZGtK1+ZGtKQNMdTajOtGtU1wAIuZAIuJp:KQSo1EZGtKgZGtK/PgtU1wAIuZAIun
Score9/10-
Renames multiple (3433) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-