Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.ba7d0...30.exe

windows7-x64

10

NEAS.ba7d0...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.ba7d0c590bc96aa3273c3797675baf30.exe

  • Size

    192KB

  • Sample

    231014-xvqjbshc35

  • MD5

    ba7d0c590bc96aa3273c3797675baf30

  • SHA1

    eed66f8f5ca3080c6cea89d7664b41cf40ca31b2

  • SHA256

    769a2a9a61fa52abbe118deb624997a0a5ecc060dc02a709f879e881165b4f70

  • SHA512

    ca59f6bb06e5e57820bf30dc4d9afcc15eade9b41871ef7c86e5a5bd4affbf29b06c35fdc0870cded678705622854883f03eff04dc9fea9acc8a133e51d051f0

  • SSDEEP

    3072:cRi6QIziD/hRl+RiVBgzL20WKFcp9jRV5C/8qy4p2Y7YWlt6o:AQIziD/zL7gzL2V4cpC0L4AY7YWT6o

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.ba7d0c590bc96aa3273c3797675baf30.exe

    • Size

      192KB

    • MD5

      ba7d0c590bc96aa3273c3797675baf30

    • SHA1

      eed66f8f5ca3080c6cea89d7664b41cf40ca31b2

    • SHA256

      769a2a9a61fa52abbe118deb624997a0a5ecc060dc02a709f879e881165b4f70

    • SHA512

      ca59f6bb06e5e57820bf30dc4d9afcc15eade9b41871ef7c86e5a5bd4affbf29b06c35fdc0870cded678705622854883f03eff04dc9fea9acc8a133e51d051f0

    • SSDEEP

      3072:cRi6QIziD/hRl+RiVBgzL20WKFcp9jRV5C/8qy4p2Y7YWlt6o:AQIziD/zL7gzL2V4cpC0L4AY7YWT6o

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks