Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 12:51

General

  • Target

    8a2a9a11335af409f9fecdeb87923c40_NEAS.exe

  • Size

    2.4MB

  • MD5

    8a2a9a11335af409f9fecdeb87923c40

  • SHA1

    6572e8f9c033c8d7f837bbc30cbd3fa1f7ef46d5

  • SHA256

    19ed336ae28c12e4ceb4de5d7998e706de3a732be1a232e64d74a5245cf814cd

  • SHA512

    ee02a3288da1a173d1cedd7546d01511dbd8e9e412a57676af901afcfeaf6854db26792a004fe52a4476e6992335e5e46d3da7a9acd9fc15927d9e638b1d1e5b

  • SSDEEP

    49152:b7oFEQXbXAr8hAF4OX6Ty3AAv1o69w7RaWh:wF9LAkmJX13AAvn9wdaWh

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8a2a9a11335af409f9fecdeb87923c40_NEAS.exe
    "C:\Users\Admin\AppData\Local\Temp\8a2a9a11335af409f9fecdeb87923c40_NEAS.exe"
    1⤵
    • Drops file in Windows directory
    PID:1736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\8a2a9a11335af409f9fecdeb87923c40_NEAS.ini

    Filesize

    2KB

    MD5

    fe01e9bb02376b85b11da53c68650fce

    SHA1

    1b42d5443e2acc61279963fb13ae3b2ae6d498ce

    SHA256

    b08a0624039d0acc7f73ff740fd81ee38d0eb52aa9f7c63dca8a682e21070569

    SHA512

    5daf0b5c664a1df75eded877681092172f2fabdbaf8e7d557f710d82f31c0839b6ce3ac87e436d211112b8b34d966fbda4383f3456644d68868b75c6f7042ef5

  • C:\Users\Admin\AppData\Local\Temp\8a2a9a11335af409f9fecdeb87923c40_NEAS.ini

    Filesize

    2KB

    MD5

    deaa629fe42790035d07baa5c90f33ab

    SHA1

    428a3a0bf1b099b0dc0bf7ce309b21c00cecb235

    SHA256

    5a47753a311ba2a5251b610545f334a433517251cd4097572449fe718947467a

    SHA512

    deec64177b49e59a36960720c443451c887652efe0166c09bbad106d0c203a47f9df39f55cb1740943d771e53b0a451ba825374f85e240011abd6f397c09c08d

  • memory/1736-1-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

  • memory/1736-133-0x0000000000400000-0x000000000066A000-memory.dmp

    Filesize

    2.4MB

  • memory/1736-135-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB