Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

49af5bac2d...0N.exe

windows7-x64

10

49af5bac2d...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49af5bac2deaff0cb21562ed7f763f30N.exe

  • Size

    1.1MB

  • Sample

    240829-jlm5ysselk

  • MD5

    49af5bac2deaff0cb21562ed7f763f30

  • SHA1

    86ebceb31c67c4ed7dc01c7bad334807eb015848

  • SHA256

    bee915f7b4839aa228a3126033c83b2a92abc83dbf4fe3992dfed410e6df60a4

  • SHA512

    b033f8167a7ddd889beec8b4050eea242dd9d08f165b384f47a74406d12a483e055c0b184e298d74eeb68ec8c0d3ed2f718bbffe1fd578911c9284462da1c0d9

  • SSDEEP

    6144:k97hogfXRrjvrSXN08IVLIBnF0tuw0GLpZmw9yNIKGq02OZhogfXRrjvrSXN08I1:M9NaGTgjGqE9NDbh

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      49af5bac2deaff0cb21562ed7f763f30N.exe

    • Size

      1.1MB

    • MD5

      49af5bac2deaff0cb21562ed7f763f30

    • SHA1

      86ebceb31c67c4ed7dc01c7bad334807eb015848

    • SHA256

      bee915f7b4839aa228a3126033c83b2a92abc83dbf4fe3992dfed410e6df60a4

    • SHA512

      b033f8167a7ddd889beec8b4050eea242dd9d08f165b384f47a74406d12a483e055c0b184e298d74eeb68ec8c0d3ed2f718bbffe1fd578911c9284462da1c0d9

    • SSDEEP

      6144:k97hogfXRrjvrSXN08IVLIBnF0tuw0GLpZmw9yNIKGq02OZhogfXRrjvrSXN08I1:M9NaGTgjGqE9NDbh

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks