Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.589e8...b0.exe

windows7-x64

10

NEAS.589e8...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.589e843d56d41658a6b6f704d6170fb0.exe

  • Size

    401KB

  • Sample

    231013-y6wedshg3v

  • MD5

    589e843d56d41658a6b6f704d6170fb0

  • SHA1

    fba4dcf6dfd711e4a64d2e8a3a8c240bdcf26917

  • SHA256

    7997ab366a49ea09f18b86657a336e09a7ae06ea6c11261e35916728f83fb2cc

  • SHA512

    978a86cfd99ff84c99ff4e4e4808392d04f171d677be6caf933e3b00c74072452ab763c4d6fedeb5ea0913da973fb32dbe452563eb5cad37b1fe24fc57d9eb2f

  • SSDEEP

    6144:Hx27sJB83UKCyJndpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836PGyA7:HGsJGUAndpV6yYP4rbpV6yYPg058KrY

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.589e843d56d41658a6b6f704d6170fb0.exe

    • Size

      401KB

    • MD5

      589e843d56d41658a6b6f704d6170fb0

    • SHA1

      fba4dcf6dfd711e4a64d2e8a3a8c240bdcf26917

    • SHA256

      7997ab366a49ea09f18b86657a336e09a7ae06ea6c11261e35916728f83fb2cc

    • SHA512

      978a86cfd99ff84c99ff4e4e4808392d04f171d677be6caf933e3b00c74072452ab763c4d6fedeb5ea0913da973fb32dbe452563eb5cad37b1fe24fc57d9eb2f

    • SSDEEP

      6144:Hx27sJB83UKCyJndpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836PGyA7:HGsJGUAndpV6yYP4rbpV6yYPg058KrY

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks