Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
955e828373b28124e1f551b79d9a2bb0_NEAS
-
Size
1.7MB
-
Sample
240507-jjmreafb9w
-
MD5
955e828373b28124e1f551b79d9a2bb0
-
SHA1
5c06092b8253f0a63ebeb0af881556297debcfc0
-
SHA256
27162233bfe529fe8db104ff62039567039ee88f0515799228b8d918525a30de
-
SHA512
f8ff4298a12848e607cea4d1c50498ffc334b25efd798f10c00fa541707c5690882cd9069acb4a4ecf38aeaf9828b24e2f987655f63379dc6d50d4b9e903d9ad
-
SSDEEP
49152:XZ62sPN45Ka8zGwt+sd1J7nRFt+TW6lZskef52Ws:X45yKjRdPRzv6lJG9s
Behavioral task
behavioral1
Sample
955e828373b28124e1f551b79d9a2bb0_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
955e828373b28124e1f551b79d9a2bb0_NEAS.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
955e828373b28124e1f551b79d9a2bb0_NEAS
-
Size
1.7MB
-
MD5
955e828373b28124e1f551b79d9a2bb0
-
SHA1
5c06092b8253f0a63ebeb0af881556297debcfc0
-
SHA256
27162233bfe529fe8db104ff62039567039ee88f0515799228b8d918525a30de
-
SHA512
f8ff4298a12848e607cea4d1c50498ffc334b25efd798f10c00fa541707c5690882cd9069acb4a4ecf38aeaf9828b24e2f987655f63379dc6d50d4b9e903d9ad
-
SSDEEP
49152:XZ62sPN45Ka8zGwt+sd1J7nRFt+TW6lZskef52Ws:X45yKjRdPRzv6lJG9s
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-