Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.c95ca...e0.exe

windows7-x64

10

NEAS.c95ca...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.c95ca1f05755a9a693c3e1fb80d3cde0.exe

  • Size

    240KB

  • Sample

    231014-xw823aab92

  • MD5

    c95ca1f05755a9a693c3e1fb80d3cde0

  • SHA1

    29297311b19dbec776fba324b9a132e39817edde

  • SHA256

    6a20a08a5702a28e51be517ebcce871dddf084319fc2bbe44006627ce074c66d

  • SHA512

    c47c8dc29ff294fde0df47a12ee771dae2057c95d06dbf621425fc3dcd50b6807cd0ae5cc9eae398dda142ddcf706a6ee8e288ec1d3e89406559d65dc8fe471e

  • SSDEEP

    3072:JxCyhmKhno/s0WJGAn1nuZ4GZ6APgxed6BYudlNPMAvAURfE+Hxgu+tAcrbFAJck:PCyP91306IyedZwlNPjLs+H8rtMs4

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.c95ca1f05755a9a693c3e1fb80d3cde0.exe

    • Size

      240KB

    • MD5

      c95ca1f05755a9a693c3e1fb80d3cde0

    • SHA1

      29297311b19dbec776fba324b9a132e39817edde

    • SHA256

      6a20a08a5702a28e51be517ebcce871dddf084319fc2bbe44006627ce074c66d

    • SHA512

      c47c8dc29ff294fde0df47a12ee771dae2057c95d06dbf621425fc3dcd50b6807cd0ae5cc9eae398dda142ddcf706a6ee8e288ec1d3e89406559d65dc8fe471e

    • SSDEEP

      3072:JxCyhmKhno/s0WJGAn1nuZ4GZ6APgxed6BYudlNPMAvAURfE+Hxgu+tAcrbFAJck:PCyP91306IyedZwlNPjLs+H8rtMs4

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks