Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.f8817...70.exe

windows7-x64

10

NEAS.f8817...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f881784d7520490d5d4a00ceab205070.exe

  • Size

    273KB

  • Sample

    231014-kafr6sag3v

  • MD5

    f881784d7520490d5d4a00ceab205070

  • SHA1

    5409c8b7f44b6cb78f2f69d389da8516bc741b20

  • SHA256

    fb034a8fb835a5f6cd5771e53d8f4f9a93bf5aecc63e1e0ca6c4d29a2d8c9c44

  • SHA512

    50832ecd42ec8a9d931a39fcc55cd84e25fe9239bbd140f962408d88dabbc20bd13bebe99c89f4209dfa085656cc3ed849fb97fdb2621e6411fcb3e512b74cc6

  • SSDEEP

    6144:saB8q1JYV1iL+9MD/nLSIV8yw7U3FtDgc67nTGbNOspACO63+VGzJnw9wIgcvcQA:sUs1iL2KPL7Syw72dpSQos2c+VGzJw9U

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.f881784d7520490d5d4a00ceab205070.exe

    • Size

      273KB

    • MD5

      f881784d7520490d5d4a00ceab205070

    • SHA1

      5409c8b7f44b6cb78f2f69d389da8516bc741b20

    • SHA256

      fb034a8fb835a5f6cd5771e53d8f4f9a93bf5aecc63e1e0ca6c4d29a2d8c9c44

    • SHA512

      50832ecd42ec8a9d931a39fcc55cd84e25fe9239bbd140f962408d88dabbc20bd13bebe99c89f4209dfa085656cc3ed849fb97fdb2621e6411fcb3e512b74cc6

    • SSDEEP

      6144:saB8q1JYV1iL+9MD/nLSIV8yw7U3FtDgc67nTGbNOspACO63+VGzJnw9wIgcvcQA:sUs1iL2KPL7Syw72dpSQos2c+VGzJw9U

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks