Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

NEAS.87e7d...d0.exe

windows7-x64

10

NEAS.87e7d...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.87e7d4cb4a0d4e2523e03bc159bef7d0.exe

  • Size

    346KB

  • Sample

    231014-wnkttsef24

  • MD5

    87e7d4cb4a0d4e2523e03bc159bef7d0

  • SHA1

    357d1149fe49928e2868238b8cf9598c557a5a7b

  • SHA256

    75161078d75acead13d1a4236df271476c17a7be656cbc536a996cdddc69db5c

  • SHA512

    23279a35049fa7a4dea72f1de343a42f599d0a9e1d02d475548dd8f53aa5ac77ec890d60596b958215150bd080632ece4bef9fe3bde0b546dad5b1d3d2079a55

  • SSDEEP

    6144:8uIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qLqIYhuIlWqB+W:X6Wq4aaE6KwyF5L0Y2D1PqLb6Wq4W

Score
10/10
evasionupx

Malware Config

Targets

    • Target

      NEAS.87e7d4cb4a0d4e2523e03bc159bef7d0.exe

    • Size

      346KB

    • MD5

      87e7d4cb4a0d4e2523e03bc159bef7d0

    • SHA1

      357d1149fe49928e2868238b8cf9598c557a5a7b

    • SHA256

      75161078d75acead13d1a4236df271476c17a7be656cbc536a996cdddc69db5c

    • SHA512

      23279a35049fa7a4dea72f1de343a42f599d0a9e1d02d475548dd8f53aa5ac77ec890d60596b958215150bd080632ece4bef9fe3bde0b546dad5b1d3d2079a55

    • SSDEEP

      6144:8uIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qLqIYhuIlWqB+W:X6Wq4aaE6KwyF5L0Y2D1PqLb6Wq4W

    Score
    10/10
    evasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks