Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

NEAS.5ebbf...d0.exe

windows7-x64

7

NEAS.5ebbf...d0.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.5ebbfb9b93695b5d5c99fd4217458ad0.exe

  • Size

    180KB

  • Sample

    231014-wja4tsba4t

  • MD5

    5ebbfb9b93695b5d5c99fd4217458ad0

  • SHA1

    23525823da9fc2e5a1cbec11b7335e272f9dc539

  • SHA256

    4b846b72b8977b12b19fcfe2532e54355ccbb9fda5ed0a98d618608bb50426c0

  • SHA512

    cba04e2998b9e1df6e4c6662c74ce3282dadd0976c83de45e90c17a8c50a639eda578fba5c6cb42753990c49c97dbf19716e583ff4b8e9cefee305f44ae5df58

  • SSDEEP

    3072:90jxhGO8Z0J0K00hVUXzxmqaQ0TZgJK6Z4qujjF6mBFIWvIPPc+/DADc+yHH23LV:9GE0+GANmEOMujYmPIWvI3X/EDc123LV

Score
7/10

Malware Config

Targets

    • Target

      NEAS.5ebbfb9b93695b5d5c99fd4217458ad0.exe

    • Size

      180KB

    • MD5

      5ebbfb9b93695b5d5c99fd4217458ad0

    • SHA1

      23525823da9fc2e5a1cbec11b7335e272f9dc539

    • SHA256

      4b846b72b8977b12b19fcfe2532e54355ccbb9fda5ed0a98d618608bb50426c0

    • SHA512

      cba04e2998b9e1df6e4c6662c74ce3282dadd0976c83de45e90c17a8c50a639eda578fba5c6cb42753990c49c97dbf19716e583ff4b8e9cefee305f44ae5df58

    • SSDEEP

      3072:90jxhGO8Z0J0K00hVUXzxmqaQ0TZgJK6Z4qujjF6mBFIWvIPPc+/DADc+yHH23LV:9GE0+GANmEOMujYmPIWvI3X/EDc123LV

    Score
    7/10

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks