Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.71dc1...20.exe

windows7-x64

10

NEAS.71dc1...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.71dc180c1c8af1d09d77fbc35d047f20.exe

  • Size

    136KB

  • Sample

    231016-w2dmnsgd35

  • MD5

    71dc180c1c8af1d09d77fbc35d047f20

  • SHA1

    f67eefe8e90fe50f21bd46ecf604e568bd86581f

  • SHA256

    37b807d9cfa611c627f6b1f8d1a26d428ceef3cab557e61a1b45307f76fff519

  • SHA512

    d94b599e60e308492694ea61befa4d622d2e8ca8b923574c96360986afa7070b6a374c3bef05e13cd805d5477769022b77fc729584b57b9098d2e7a56220cd7e

  • SSDEEP

    3072:Pp5sEyRpCCPu8qvNzOyEs2k8QYxQdLrCimBaH8UH30ZIvM6qMH5X3O/gU:Pp8HiiyEXFtCApaH8m3QIvMWH5H3U

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.71dc180c1c8af1d09d77fbc35d047f20.exe

    • Size

      136KB

    • MD5

      71dc180c1c8af1d09d77fbc35d047f20

    • SHA1

      f67eefe8e90fe50f21bd46ecf604e568bd86581f

    • SHA256

      37b807d9cfa611c627f6b1f8d1a26d428ceef3cab557e61a1b45307f76fff519

    • SHA512

      d94b599e60e308492694ea61befa4d622d2e8ca8b923574c96360986afa7070b6a374c3bef05e13cd805d5477769022b77fc729584b57b9098d2e7a56220cd7e

    • SSDEEP

      3072:Pp5sEyRpCCPu8qvNzOyEs2k8QYxQdLrCimBaH8UH30ZIvM6qMH5X3O/gU:Pp8HiiyEXFtCApaH8m3QIvMWH5H3U

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks