Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.9a91f...f0.exe

windows7-x64

10

NEAS.9a91f...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.9a91fe3b7adc71b778e4be0e971108f0.exe

  • Size

    364KB

  • Sample

    231013-zbjmsacg7w

  • MD5

    9a91fe3b7adc71b778e4be0e971108f0

  • SHA1

    800a3ee147253823abe6615332c4e246f12d88ee

  • SHA256

    011c2f123869359c4be164d23e5c0fe27bd23eec7f3a0a6f41cb5f4bb037b690

  • SHA512

    72e344587506a33bb368f78ca94c3aae17dfcce1d6d9c94d6f491e735ff4e5526dfc072a926543b2c22a591c79d3ad11e538e8d315a01d63dfddf97236683d54

  • SSDEEP

    6144:Ts7Ha9nUUHyN4lMdQ3bff6uKcUUHyN4lMdQ7Z5zajSsUUHyN4lMdQ3bff6uKcUUZ:7BHyN+X5HyNA7oHyN+X5HyN

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.9a91fe3b7adc71b778e4be0e971108f0.exe

    • Size

      364KB

    • MD5

      9a91fe3b7adc71b778e4be0e971108f0

    • SHA1

      800a3ee147253823abe6615332c4e246f12d88ee

    • SHA256

      011c2f123869359c4be164d23e5c0fe27bd23eec7f3a0a6f41cb5f4bb037b690

    • SHA512

      72e344587506a33bb368f78ca94c3aae17dfcce1d6d9c94d6f491e735ff4e5526dfc072a926543b2c22a591c79d3ad11e538e8d315a01d63dfddf97236683d54

    • SSDEEP

      6144:Ts7Ha9nUUHyN4lMdQ3bff6uKcUUHyN4lMdQ7Z5zajSsUUHyN4lMdQ3bff6uKcUUZ:7BHyN+X5HyNA7oHyN+X5HyN

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks