Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
86e7906c7593c2eb992b3e473f5925f4cb5233f8698e4ce10f2126d311fa7da0N.exe
-
Size
1.4MB
-
Sample
241124-z4b4eawkbk
-
MD5
d102265b05a1746dad55c5ea498e8f00
-
SHA1
4dabfbe5bbfe7e90e275717321aeafcb915e3b7f
-
SHA256
86e7906c7593c2eb992b3e473f5925f4cb5233f8698e4ce10f2126d311fa7da0
-
SHA512
c688ee87fb41e562bc7f0003474fa3475ad89c17511d7c2897a9557ccaef9c119ee0fc6071852c860e926db929827e408b216e274352235a7454f229ea130229
-
SSDEEP
24576:X6eUDxsr6O4jInSugHJ2ngSMbaEGprpQnSER1Jn5mYfdw+VCfqbh:Kf06O4j1HJ2gjaEGpranSHr8
Behavioral task
behavioral1
Sample
86e7906c7593c2eb992b3e473f5925f4cb5233f8698e4ce10f2126d311fa7da0N.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
86e7906c7593c2eb992b3e473f5925f4cb5233f8698e4ce10f2126d311fa7da0N.exe
-
Size
1.4MB
-
MD5
d102265b05a1746dad55c5ea498e8f00
-
SHA1
4dabfbe5bbfe7e90e275717321aeafcb915e3b7f
-
SHA256
86e7906c7593c2eb992b3e473f5925f4cb5233f8698e4ce10f2126d311fa7da0
-
SHA512
c688ee87fb41e562bc7f0003474fa3475ad89c17511d7c2897a9557ccaef9c119ee0fc6071852c860e926db929827e408b216e274352235a7454f229ea130229
-
SSDEEP
24576:X6eUDxsr6O4jInSugHJ2ngSMbaEGprpQnSER1Jn5mYfdw+VCfqbh:Kf06O4j1HJ2gjaEGpranSHr8
-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Neshta family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-