Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
cea71a299ebe23ee56705c7b80d1b24751dc45fdbd8762618cfa5c99eccac3da
-
Size
849KB
-
Sample
240723-fa5dbayakb
-
MD5
528d0fa7beea751d34448775846f21f1
-
SHA1
318aeca81bd46029ad098353e5517bed3ca74139
-
SHA256
cea71a299ebe23ee56705c7b80d1b24751dc45fdbd8762618cfa5c99eccac3da
-
SHA512
6bf9eea839e7fb0379d435060598710b15be8ebc541183274cbac4220c76ed49a59f985e20c8b5e5ab01b5819e0908256d8c55649790cda1ea4dd776e190a917
-
SSDEEP
24576:f+F0sIE9JqsC6mVFyCsffzMS6pcsP9Qtce0TBs/lPsoCyEbDb7Br5oANn90x5MO6:TbjnSU
Behavioral task
behavioral1
Sample
cea71a299ebe23ee56705c7b80d1b24751dc45fdbd8762618cfa5c99eccac3da.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
cea71a299ebe23ee56705c7b80d1b24751dc45fdbd8762618cfa5c99eccac3da.exe
Resource
win11-20240709-en
Malware Config
Targets
-
-
Target
cea71a299ebe23ee56705c7b80d1b24751dc45fdbd8762618cfa5c99eccac3da
-
Size
849KB
-
MD5
528d0fa7beea751d34448775846f21f1
-
SHA1
318aeca81bd46029ad098353e5517bed3ca74139
-
SHA256
cea71a299ebe23ee56705c7b80d1b24751dc45fdbd8762618cfa5c99eccac3da
-
SHA512
6bf9eea839e7fb0379d435060598710b15be8ebc541183274cbac4220c76ed49a59f985e20c8b5e5ab01b5819e0908256d8c55649790cda1ea4dd776e190a917
-
SSDEEP
24576:f+F0sIE9JqsC6mVFyCsffzMS6pcsP9Qtce0TBs/lPsoCyEbDb7Br5oANn90x5MO6:TbjnSU
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Sets service image path in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Modifies system executable filetype association
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Change Default File Association
1