Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
0df48b4d53761431367ed6ac63a524c0_NEAS
-
Size
85KB
-
Sample
240507-x2rpzabe4z
-
MD5
0df48b4d53761431367ed6ac63a524c0
-
SHA1
e2f7212acdfa8189c0067a6f1dc2b7fa14a6b5e0
-
SHA256
262afa8de6c5cfa7c3437971b7c649b54aa48ba86aeb6d55db28a4488a80cf8a
-
SHA512
0ba0387a5b93f80267cff4aaec1c803dcf6b9bd692f30d7e8c27cd86509d479b75a8a2c72842c79e82d9a847a77f5ff94d3bdfc17613c01951ab9a0a6a30e4e0
-
SSDEEP
1536:W7ZhA7pApMaxB4b0CYJ97lEVqNR7Yge+eJG/x/M6F:6e7WpMaxeb0CYJ97lEYNR73e+eKZh
Static task
static1
Behavioral task
behavioral1
Sample
0df48b4d53761431367ed6ac63a524c0_NEAS.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0df48b4d53761431367ed6ac63a524c0_NEAS.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
0df48b4d53761431367ed6ac63a524c0_NEAS
-
Size
85KB
-
MD5
0df48b4d53761431367ed6ac63a524c0
-
SHA1
e2f7212acdfa8189c0067a6f1dc2b7fa14a6b5e0
-
SHA256
262afa8de6c5cfa7c3437971b7c649b54aa48ba86aeb6d55db28a4488a80cf8a
-
SHA512
0ba0387a5b93f80267cff4aaec1c803dcf6b9bd692f30d7e8c27cd86509d479b75a8a2c72842c79e82d9a847a77f5ff94d3bdfc17613c01951ab9a0a6a30e4e0
-
SSDEEP
1536:W7ZhA7pApMaxB4b0CYJ97lEVqNR7Yge+eJG/x/M6F:6e7WpMaxeb0CYJ97lEYNR73e+eKZh
Score9/10-
Renames multiple (3687) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-