Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2c0059ed9882d237d1f5f53333a682c6d0cfd7375e3cf98daa411e1c4a5babd1
-
Size
210KB
-
Sample
250203-z4e53atmdv
-
MD5
0264b44dbcf6d4441e12e240598a57b9
-
SHA1
a78c6402b0ddd23912439dd2636e314ab9852a45
-
SHA256
2c0059ed9882d237d1f5f53333a682c6d0cfd7375e3cf98daa411e1c4a5babd1
-
SHA512
6b289bd198acae969839e207877d810317c0eaeef0af86f2ddabfcbf427bce8d4ab8496e4be467d71619412db201a51d040a562ee581e54fbda727b9185ce7e4
-
SSDEEP
3072:sr85CprE/kSjt5WvtocBs+sP4sUZeHrsvHFPHQX:k9pw/kSjvWvtVBszPvUsHr8lPHI
Behavioral task
behavioral1
Sample
2c0059ed9882d237d1f5f53333a682c6d0cfd7375e3cf98daa411e1c4a5babd1.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2c0059ed9882d237d1f5f53333a682c6d0cfd7375e3cf98daa411e1c4a5babd1.exe
Resource
win10v2004-20250129-en
Malware Config
Targets
-
-
Target
2c0059ed9882d237d1f5f53333a682c6d0cfd7375e3cf98daa411e1c4a5babd1
-
Size
210KB
-
MD5
0264b44dbcf6d4441e12e240598a57b9
-
SHA1
a78c6402b0ddd23912439dd2636e314ab9852a45
-
SHA256
2c0059ed9882d237d1f5f53333a682c6d0cfd7375e3cf98daa411e1c4a5babd1
-
SHA512
6b289bd198acae969839e207877d810317c0eaeef0af86f2ddabfcbf427bce8d4ab8496e4be467d71619412db201a51d040a562ee581e54fbda727b9185ce7e4
-
SSDEEP
3072:sr85CprE/kSjt5WvtocBs+sP4sUZeHrsvHFPHQX:k9pw/kSjvWvtVBszPvUsHr8lPHI
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Neshta family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1