Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.d791d...10.exe

windows7-x64

10

NEAS.d791d...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d791d69835b5d00f47e28559441ddb10.exe

  • Size

    80KB

  • Sample

    231013-zh9sjshd3z

  • MD5

    d791d69835b5d00f47e28559441ddb10

  • SHA1

    f36153fed3cacd00e09fdcfe24ba4ef179c4be29

  • SHA256

    a7ada5a4063c11b350192430b87fca3e3aa9dc25a6e9ff3def5c6a8837df608e

  • SHA512

    384aeaecc7473f8a2aeba5c8cb3b8be3583b374685772da5621943af1c932bd0baae88c3eb875f427792546f083ebc5f803421f429e6bd3c093b0750832a5baf

  • SSDEEP

    1536:HSYPsDZOTF8RMV8Sh4+kdwVhzhA1x2LPS5DUHRbPa9b6i+sIk:RsCF8RMV8Sh4+ksDA4PS5DSCopsIk

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.d791d69835b5d00f47e28559441ddb10.exe

    • Size

      80KB

    • MD5

      d791d69835b5d00f47e28559441ddb10

    • SHA1

      f36153fed3cacd00e09fdcfe24ba4ef179c4be29

    • SHA256

      a7ada5a4063c11b350192430b87fca3e3aa9dc25a6e9ff3def5c6a8837df608e

    • SHA512

      384aeaecc7473f8a2aeba5c8cb3b8be3583b374685772da5621943af1c932bd0baae88c3eb875f427792546f083ebc5f803421f429e6bd3c093b0750832a5baf

    • SSDEEP

      1536:HSYPsDZOTF8RMV8Sh4+kdwVhzhA1x2LPS5DUHRbPa9b6i+sIk:RsCF8RMV8Sh4+ksDA4PS5DSCopsIk

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks