Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.d81a2...JC.exe

windows7-x64

10

NEAS.d81a2...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d81a2fd709de1ed1912859b305982e93_JC.exe

  • Size

    1.9MB

  • Sample

    231014-n2cflsde7t

  • MD5

    d81a2fd709de1ed1912859b305982e93

  • SHA1

    6b53fa9e818fe627da50ea17b5827a9de8728eb8

  • SHA256

    17f0e5e42be4ff47afd197017417e7392360d833762247c465ccbccb8e88381e

  • SHA512

    c86f4c1f75fef729e88e48817a04342bc50515e70acdc69e31b642d950c9d6baca70ce74c164322e68a6466ad29115304c2b7d578f71c9cb08cbe440e1a75d9b

  • SSDEEP

    24576:GNIVyeNIVy2j5aaRLVtnX6ojNIVyeNIVy2j1bNIVyeNIVy2j5aaRLVtnX6ojNIVi:5yjAi6yjIyjAi6yjx

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.d81a2fd709de1ed1912859b305982e93_JC.exe

    • Size

      1.9MB

    • MD5

      d81a2fd709de1ed1912859b305982e93

    • SHA1

      6b53fa9e818fe627da50ea17b5827a9de8728eb8

    • SHA256

      17f0e5e42be4ff47afd197017417e7392360d833762247c465ccbccb8e88381e

    • SHA512

      c86f4c1f75fef729e88e48817a04342bc50515e70acdc69e31b642d950c9d6baca70ce74c164322e68a6466ad29115304c2b7d578f71c9cb08cbe440e1a75d9b

    • SSDEEP

      24576:GNIVyeNIVy2j5aaRLVtnX6ojNIVyeNIVy2j1bNIVyeNIVy2j5aaRLVtnX6ojNIVi:5yjAi6yjIyjAi6yjx

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks