Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

Nezur_Executor.zip

windows7-x64

1

Nezur_Executor.zip

windows10-2004-x64

1

Nezur_Inte...s.json

windows7-x64

3

Nezur_Inte...s.json

windows10-2004-x64

3

Nezur_Inte...rprint

windows7-x64

3

Nezur_Inte...rprint

windows10-2004-x64

3

Nezur_Inte...t.json

windows7-x64

3

Nezur_Inte...t.json

windows10-2004-x64

3

Nezur_Inte...s.json

windows7-x64

3

Nezur_Inte...s.json

windows10-2004-x64

3

Nezur_Inte...crumbs

windows7-x64

1

Nezur_Inte...crumbs

windows10-2004-x64

1

Nezur_Inte...7C.pma

windows7-x64

3

Nezur_Inte...7C.pma

windows10-2004-x64

3

Nezur_Inte...1C.pma

windows7-x64

3

Nezur_Inte...1C.pma

windows10-2004-x64

3

Nezur_Inte...rl-set

windows7-x64

1

Nezur_Inte...rl-set

windows10-2004-x64

1

Nezur_Inte...rprint

windows7-x64

3

Nezur_Inte...rprint

windows10-2004-x64

3

Nezur_Inte...t.json

windows7-x64

3

Nezur_Inte...t.json

windows10-2004-x64

3

Nezur_Inte...gs.dat

windows7-x64

3

Nezur_Inte...gs.dat

windows10-2004-x64

3

Nezur_Inte...re.dat

windows7-x64

3

Nezur_Inte...re.dat

windows10-2004-x64

3

Nezur_Inte...ve.pma

windows7-x64

3

Nezur_Inte...ve.pma

windows10-2004-x64

3

Nezur_Inte...data_0

windows7-x64

1

Nezur_Inte...data_0

windows10-2004-x64

1

Nezur_Inte...data_1

windows7-x64

1

Nezur_Inte...data_1

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/09/2024, 12:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Nezur_Interface.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-66DF9A3F-707C.pma

  • Size

    1.2MB

  • MD5

    9b37de479b5376ffc3722ffdeb49631f

  • SHA1

    95547905366d95a5ca92f31ad850a0ba3bded9fd

  • SHA256

    d1ad5c7a8c0802bb45de4cba6620bab00c6e780e48e45366ad4c46cfad284de9

  • SHA512

    9a0f171a5bd0437e1b5f03c216dba6a85b581a6781382c055eee402856cfd445bab68c932d1ebe841d6831adc575201a538e406d84441e3fa3e43a1c1d0e9ebe

  • SSDEEP

    6144:PjbN56EaH7M4ivD0/JpopuhNLfSm7YSJi:l56nbUS5Hb

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Nezur_Interface.exe.WebView2\EBWebView\BrowserMetrics\BrowserMetrics-66DF9A3F-707C.pma
    1⤵
    • Modifies registry class
    PID:1136
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:2948

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads