Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.2d9c4...50.exe

windows7-x64

10

NEAS.2d9c4...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.2d9c4e903c6180e693118e4b0b76a550.exe

  • Size

    880KB

  • Sample

    231013-ys9d4afe9y

  • MD5

    2d9c4e903c6180e693118e4b0b76a550

  • SHA1

    4f6d22925df468ee7336d5a1c0e811392e882781

  • SHA256

    6b4325be73812dcf224faf1b471117def39d506c96a4f1621ce5cef2faaf10a8

  • SHA512

    7845e00fbfc5ba949c1f26fe68d9da9fde3630ddf2a1563dcbdd35279980c13bb2d03c915946bb65c25ade40516d70ecd720f0d1585c908db7c5d4c25a5fac96

  • SSDEEP

    12288:oFSKzbDjv1BW5pvmexavWBW5pvzcvTBW5pvmexavWBW5pvjkvQBW5pvmexavWBWS:oFSKXDpBixNBJBixNBiBixNBJBixNB

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.2d9c4e903c6180e693118e4b0b76a550.exe

    • Size

      880KB

    • MD5

      2d9c4e903c6180e693118e4b0b76a550

    • SHA1

      4f6d22925df468ee7336d5a1c0e811392e882781

    • SHA256

      6b4325be73812dcf224faf1b471117def39d506c96a4f1621ce5cef2faaf10a8

    • SHA512

      7845e00fbfc5ba949c1f26fe68d9da9fde3630ddf2a1563dcbdd35279980c13bb2d03c915946bb65c25ade40516d70ecd720f0d1585c908db7c5d4c25a5fac96

    • SSDEEP

      12288:oFSKzbDjv1BW5pvmexavWBW5pvzcvTBW5pvmexavWBW5pvjkvQBW5pvmexavWBWS:oFSKXDpBixNBJBixNBiBixNBJBixNB

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks