Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.bd9fc...e0.exe

windows7-x64

10

NEAS.bd9fc...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.bd9fc2912bc9e6585c34fca36b81bee0.exe

  • Size

    246KB

  • Sample

    231021-1crkfsae75

  • MD5

    bd9fc2912bc9e6585c34fca36b81bee0

  • SHA1

    aeae3d970e37f8a4d04513171d5d06a7ac9bdf1a

  • SHA256

    853c0b0e7e5643e11e8350b183925cc76a7d8a21810a035586606a1c4a21f4cb

  • SHA512

    91c69ee6cf82d1edd674a6344bf0ffd786f42ae50479a2b5ef802f16719a5f405e4f0f59e2e35048a1fcd0c5160a538d087235d4f77c1cf7eb8989924dc55ef6

  • SSDEEP

    3072:11xtgiPkgbCP9Cub2B1xdLm102VZjuajDMyap9jCyFsWteYCWS3OF9HqoX:PxukTWP9CG2B1xBm102VQlterS9HrX

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.bd9fc2912bc9e6585c34fca36b81bee0.exe

    • Size

      246KB

    • MD5

      bd9fc2912bc9e6585c34fca36b81bee0

    • SHA1

      aeae3d970e37f8a4d04513171d5d06a7ac9bdf1a

    • SHA256

      853c0b0e7e5643e11e8350b183925cc76a7d8a21810a035586606a1c4a21f4cb

    • SHA512

      91c69ee6cf82d1edd674a6344bf0ffd786f42ae50479a2b5ef802f16719a5f405e4f0f59e2e35048a1fcd0c5160a538d087235d4f77c1cf7eb8989924dc55ef6

    • SSDEEP

      3072:11xtgiPkgbCP9Cub2B1xdLm102VZjuajDMyap9jCyFsWteYCWS3OF9HqoX:PxukTWP9CG2B1xBm102VQlterS9HrX

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks