Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
aef8414f1422fa21b0209def99e5db66_NEAS
-
Size
378KB
-
Sample
240507-wv22pabg72
-
MD5
aef8414f1422fa21b0209def99e5db66
-
SHA1
23a61b0ebdbf9492523879e09d5f894ac34e92d9
-
SHA256
2d73a1fa8b61c47e53cf471899bdcf7399f062a8c050aa25af2c04a886d58088
-
SHA512
6c930c97215a39eb774cf616e61b07f260706ccf30ed7cfb0fcc84304b62b276f1b8d56389ff81fb5cc097d59591652cb8d35ee831c00f2c3ea53f9a0d43ba53
-
SSDEEP
6144:tFPxPke+eIr9RUxfKIuqBcKxNWdp+bkrdHs1lpaSL4vtFVHPyvewDpgs5hBhv:3PxPir9RyiIuGcKbpaSL4vtFVHPyvewf
Static task
static1
Behavioral task
behavioral1
Sample
aef8414f1422fa21b0209def99e5db66_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aef8414f1422fa21b0209def99e5db66_NEAS.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
aef8414f1422fa21b0209def99e5db66_NEAS
-
Size
378KB
-
MD5
aef8414f1422fa21b0209def99e5db66
-
SHA1
23a61b0ebdbf9492523879e09d5f894ac34e92d9
-
SHA256
2d73a1fa8b61c47e53cf471899bdcf7399f062a8c050aa25af2c04a886d58088
-
SHA512
6c930c97215a39eb774cf616e61b07f260706ccf30ed7cfb0fcc84304b62b276f1b8d56389ff81fb5cc097d59591652cb8d35ee831c00f2c3ea53f9a0d43ba53
-
SSDEEP
6144:tFPxPke+eIr9RUxfKIuqBcKxNWdp+bkrdHs1lpaSL4vtFVHPyvewDpgs5hBhv:3PxPir9RyiIuGcKbpaSL4vtFVHPyvewf
Score9/10-
Renames multiple (228) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-