Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.cbaf4...JC.exe

windows7-x64

10

NEAS.cbaf4...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.cbaf480303aa3bc2ea9dbce8c2c0dbc0_JC.exe

  • Size

    128KB

  • Sample

    231006-sx28padh2y

  • MD5

    cbaf480303aa3bc2ea9dbce8c2c0dbc0

  • SHA1

    c4977796a29e9c660c0e364754f2236a9f93e482

  • SHA256

    27c861cd3e94a53cd547c95f891570e46ffd9121ed7a72afdbd2caef130ea5e9

  • SHA512

    35799a4c1949d44325dbc1bf222f6ac72f815f0647016e83442e206a6a9d43f21885ee4849b751bc548d9db5ddc9810060090be3921d8c52a4465de82520c24a

  • SSDEEP

    3072:MjCiVEy3gmB/gyLlFzB4Q+nnZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZeZZ8HLZg:MjCiHuySN/dqiIdWZHEFJ7aWN1B

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.cbaf480303aa3bc2ea9dbce8c2c0dbc0_JC.exe

    • Size

      128KB

    • MD5

      cbaf480303aa3bc2ea9dbce8c2c0dbc0

    • SHA1

      c4977796a29e9c660c0e364754f2236a9f93e482

    • SHA256

      27c861cd3e94a53cd547c95f891570e46ffd9121ed7a72afdbd2caef130ea5e9

    • SHA512

      35799a4c1949d44325dbc1bf222f6ac72f815f0647016e83442e206a6a9d43f21885ee4849b751bc548d9db5ddc9810060090be3921d8c52a4465de82520c24a

    • SSDEEP

      3072:MjCiVEy3gmB/gyLlFzB4Q+nnZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZeZZ8HLZg:MjCiHuySN/dqiIdWZHEFJ7aWN1B

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks