Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.c1f2f...a0.exe

windows7-x64

10

NEAS.c1f2f...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.c1f2f8c8acb4036d259af9f9159d4ca0.exe

  • Size

    63KB

  • Sample

    231014-xwgmtahg33

  • MD5

    c1f2f8c8acb4036d259af9f9159d4ca0

  • SHA1

    165e95985f45ac37771a6c98b6749e2a873fb197

  • SHA256

    2a7241523a5637f99b0bd3deb6be0ef66bd21ce0c5db89a2946e4d7980d1ca44

  • SHA512

    198b46711719f529ea05f7dc1344e09333244909f1bd3942d28a646f7e670a33aba32c98ffb0a65adb3ee4dd2c2afac51731f2d868757f4d0a4dacde26004437

  • SSDEEP

    768:pzprmog4dAIVMNKRX58U4/sGAqAjzXNuL/1H5oVEamrUTvn93b7NRDMFME3eUgU:pdmog4RyNKgPj8k9+VuEn9rjDHE

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.c1f2f8c8acb4036d259af9f9159d4ca0.exe

    • Size

      63KB

    • MD5

      c1f2f8c8acb4036d259af9f9159d4ca0

    • SHA1

      165e95985f45ac37771a6c98b6749e2a873fb197

    • SHA256

      2a7241523a5637f99b0bd3deb6be0ef66bd21ce0c5db89a2946e4d7980d1ca44

    • SHA512

      198b46711719f529ea05f7dc1344e09333244909f1bd3942d28a646f7e670a33aba32c98ffb0a65adb3ee4dd2c2afac51731f2d868757f4d0a4dacde26004437

    • SSDEEP

      768:pzprmog4dAIVMNKRX58U4/sGAqAjzXNuL/1H5oVEamrUTvn93b7NRDMFME3eUgU:pdmog4RyNKgPj8k9+VuEn9rjDHE

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks