Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.cf851...JC.exe

windows7-x64

10

NEAS.cf851...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.cf85188af678ca33d3cfc3c5d1ccc250_JC.exe

  • Size

    182KB

  • Sample

    231007-nq1n3abd9y

  • MD5

    cf85188af678ca33d3cfc3c5d1ccc250

  • SHA1

    aca0bf6939704211976532353fc8bdd9c248585b

  • SHA256

    ebc29309b59e353937bc9d10d56f7d8a053c19fea5e739b8971c14af8e885c8d

  • SHA512

    d22debb915d86641be078ab9b6d8a4e9d82caa9d8984de7a8d802bb0f2a15d2fb348e32a37e5bc51d87c43d51d9c77a6baab810f54b7f378584f026ff0bd4e0f

  • SSDEEP

    3072:FomdOTccIm2ksY36ZVlLBsLnVUUHyNwtN4/nEBlMdQbf4qejBxhW+3alLBsLnVUW:C9qZ8UUHyN4lMdQcqejBxggjUUHyN4lX

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.cf85188af678ca33d3cfc3c5d1ccc250_JC.exe

    • Size

      182KB

    • MD5

      cf85188af678ca33d3cfc3c5d1ccc250

    • SHA1

      aca0bf6939704211976532353fc8bdd9c248585b

    • SHA256

      ebc29309b59e353937bc9d10d56f7d8a053c19fea5e739b8971c14af8e885c8d

    • SHA512

      d22debb915d86641be078ab9b6d8a4e9d82caa9d8984de7a8d802bb0f2a15d2fb348e32a37e5bc51d87c43d51d9c77a6baab810f54b7f378584f026ff0bd4e0f

    • SSDEEP

      3072:FomdOTccIm2ksY36ZVlLBsLnVUUHyNwtN4/nEBlMdQbf4qejBxhW+3alLBsLnVUW:C9qZ8UUHyN4lMdQcqejBxggjUUHyN4lX

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks