Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.ed468...a0.exe

windows7-x64

10

NEAS.ed468...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.ed468555b5eb89c1aaae13a81e8ddfa0.exe

  • Size

    135KB

  • Sample

    231014-j9danabh98

  • MD5

    ed468555b5eb89c1aaae13a81e8ddfa0

  • SHA1

    fb07e2da5b9a747c41f88663643f9dfab040b9b2

  • SHA256

    486685122c026db0fc3fd7ed53b2ced2909123c2aec2d015e4db9d15a39a8c9f

  • SHA512

    9e13ce00793703394d6e74b27ea2b7f337b8b3140008e4be2955872aabe279f6605a24cbe39bc192600c0372d072a3889460723e8a1cd9c1ac2800f5263456f0

  • SSDEEP

    1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVDK3:UVqoCl/YgjxEufVU0TbTyDDal5K3

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      NEAS.ed468555b5eb89c1aaae13a81e8ddfa0.exe

    • Size

      135KB

    • MD5

      ed468555b5eb89c1aaae13a81e8ddfa0

    • SHA1

      fb07e2da5b9a747c41f88663643f9dfab040b9b2

    • SHA256

      486685122c026db0fc3fd7ed53b2ced2909123c2aec2d015e4db9d15a39a8c9f

    • SHA512

      9e13ce00793703394d6e74b27ea2b7f337b8b3140008e4be2955872aabe279f6605a24cbe39bc192600c0372d072a3889460723e8a1cd9c1ac2800f5263456f0

    • SSDEEP

      1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVDK3:UVqoCl/YgjxEufVU0TbTyDDal5K3

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks