Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

NEAS.54cfe...10.exe

windows7-x64

7

NEAS.54cfe...10.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.54cfe95e8879c2634882f0727dc6fe10.exe

  • Size

    118KB

  • Sample

    231021-z6tfgafa32

  • MD5

    54cfe95e8879c2634882f0727dc6fe10

  • SHA1

    a94e97f322fa435c4ce08896491143d50720e43f

  • SHA256

    cea69bdbc50beb7c92c811acd3ec8134186e629ace3317c96c548e1de1b2125d

  • SHA512

    51b24609a402f045e36137d9618527fcf2384aa3ea1d64ae8ade36a87e609243d8aed1de8000ca8faec00a8ff2e40f99e08af472c4d72977e6e0c396541f0f5e

  • SSDEEP

    3072:+OjWuyt0ZsqsXOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7zjPPb:+Is9OKofHfHTXQLzgvnzHPowYbvrjD/m

Score
7/10
persistence

Malware Config

Targets

    • Target

      NEAS.54cfe95e8879c2634882f0727dc6fe10.exe

    • Size

      118KB

    • MD5

      54cfe95e8879c2634882f0727dc6fe10

    • SHA1

      a94e97f322fa435c4ce08896491143d50720e43f

    • SHA256

      cea69bdbc50beb7c92c811acd3ec8134186e629ace3317c96c548e1de1b2125d

    • SHA512

      51b24609a402f045e36137d9618527fcf2384aa3ea1d64ae8ade36a87e609243d8aed1de8000ca8faec00a8ff2e40f99e08af472c4d72977e6e0c396541f0f5e

    • SSDEEP

      3072:+OjWuyt0ZsqsXOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7zjPPb:+Is9OKofHfHTXQLzgvnzHPowYbvrjD/m

    Score
    7/10
    persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks