Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.d72c2...00.exe

windows7-x64

10

NEAS.d72c2...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d72c22d99b11df29ed25feadf51df000.exe

  • Size

    177KB

  • Sample

    231013-zh79qabc24

  • MD5

    d72c22d99b11df29ed25feadf51df000

  • SHA1

    2cd65477acf2789a7547cbd0649517cd5f3fa4dc

  • SHA256

    b3eba318c7ccb7e2e4056b4e9d4c3c9fd40993cb14b109c0e1dcb34dc57c4f64

  • SHA512

    3331b9ad7d0f24da428f3b85c0195616cec2bd8b368f1db9fb0b34c32c4d0652e0e8ebbaa0357e05dccdd4085d754085b1b6c2fb766e0d5d3c21e960feb16e63

  • SSDEEP

    3072:6wzqgDOAhBHU9og3q/haR5sS+vfvLHhjh8g1eGFyOsa:6wsuGoga/harSvLHh98gwG0ON

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.d72c22d99b11df29ed25feadf51df000.exe

    • Size

      177KB

    • MD5

      d72c22d99b11df29ed25feadf51df000

    • SHA1

      2cd65477acf2789a7547cbd0649517cd5f3fa4dc

    • SHA256

      b3eba318c7ccb7e2e4056b4e9d4c3c9fd40993cb14b109c0e1dcb34dc57c4f64

    • SHA512

      3331b9ad7d0f24da428f3b85c0195616cec2bd8b368f1db9fb0b34c32c4d0652e0e8ebbaa0357e05dccdd4085d754085b1b6c2fb766e0d5d3c21e960feb16e63

    • SSDEEP

      3072:6wzqgDOAhBHU9og3q/haR5sS+vfvLHhjh8g1eGFyOsa:6wsuGoga/harSvLHh98gwG0ON

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks