Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
91acd372c6c8186dd4610a0ce2b34ef4_NEAS
-
Size
130KB
-
Sample
240507-wt4h5abg27
-
MD5
91acd372c6c8186dd4610a0ce2b34ef4
-
SHA1
c66b3c16dc1fe1c5e2162c92bfd7cb1a02c04ed2
-
SHA256
02a7d829804d36cd221935f4378b355be98664b237a3806a40a0e44b0a380d13
-
SHA512
8651d75bac5239d5d3b7ecd5d2f2ab521bead07f396af2c6dc2fcbe4869348585f7a33be66fbd84a0189fc4e66d99eb7e25abb5a37188427f41fb2da5313b17b
-
SSDEEP
1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCE:+nymCAIuZAIuYSMjoqtMHfhf5SM
Behavioral task
behavioral1
Sample
91acd372c6c8186dd4610a0ce2b34ef4_NEAS.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
91acd372c6c8186dd4610a0ce2b34ef4_NEAS.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
91acd372c6c8186dd4610a0ce2b34ef4_NEAS
-
Size
130KB
-
MD5
91acd372c6c8186dd4610a0ce2b34ef4
-
SHA1
c66b3c16dc1fe1c5e2162c92bfd7cb1a02c04ed2
-
SHA256
02a7d829804d36cd221935f4378b355be98664b237a3806a40a0e44b0a380d13
-
SHA512
8651d75bac5239d5d3b7ecd5d2f2ab521bead07f396af2c6dc2fcbe4869348585f7a33be66fbd84a0189fc4e66d99eb7e25abb5a37188427f41fb2da5313b17b
-
SSDEEP
1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCE:+nymCAIuZAIuYSMjoqtMHfhf5SM
Score9/10-
Renames multiple (3443) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-