Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.e4cb0...JC.exe

windows7-x64

10

NEAS.e4cb0...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e4cb082f052b38ce6886f048d84d0e20_JC.exe

  • Size

    97KB

  • Sample

    231022-svj94acb43

  • MD5

    e4cb082f052b38ce6886f048d84d0e20

  • SHA1

    b2ee91f4df3d9db81137b5a8cc8f0f55e6d80a09

  • SHA256

    36c64a5ffd905b6a98075115618b6ae51e9a221a7ea7d63ee2002ab502ba7ffa

  • SHA512

    fefa67a05daadbc04c9870826b093a6473cecd97b81892c2ea2fbd410303decfa2575d14ab4f910928cf7135391962d4e20379b1b710ebed3d303786733d7fe3

  • SSDEEP

    1536:32GB8tvyj9t4VDU2hryQO7E8uZBVdKv2I+vJXeYZ6:N8puCDFOQO7MZBVd02IWJXeK6

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.e4cb082f052b38ce6886f048d84d0e20_JC.exe

    • Size

      97KB

    • MD5

      e4cb082f052b38ce6886f048d84d0e20

    • SHA1

      b2ee91f4df3d9db81137b5a8cc8f0f55e6d80a09

    • SHA256

      36c64a5ffd905b6a98075115618b6ae51e9a221a7ea7d63ee2002ab502ba7ffa

    • SHA512

      fefa67a05daadbc04c9870826b093a6473cecd97b81892c2ea2fbd410303decfa2575d14ab4f910928cf7135391962d4e20379b1b710ebed3d303786733d7fe3

    • SSDEEP

      1536:32GB8tvyj9t4VDU2hryQO7E8uZBVdKv2I+vJXeYZ6:N8puCDFOQO7MZBVd02IWJXeK6

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks