Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.d01d0...20.exe

windows7-x64

10

NEAS.d01d0...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d01d0fe67352ecbb2dec6c9e754d0420.exe

  • Size

    74KB

  • Sample

    231022-v18kzsha5t

  • MD5

    d01d0fe67352ecbb2dec6c9e754d0420

  • SHA1

    cfd8e7192b6508c6426cdde64a757c4f9f022de1

  • SHA256

    8685d355c56c8e3c9f3c5d6345355774c72a11e81e7d74429ea272ad03481819

  • SHA512

    2ce7d391f510ad2faf5e4c60c473b61180c45e8f7977ab99c20cab1845dc10b3cc3f33b1bc0feef7554af0a6aa15a3ac3474172055f97c1e87e6cbc5115ab106

  • SSDEEP

    1536:AuShgIpYgWlNYjlOGkuz2JWv2MbBeFypMmUoE:ZIagR8NC0WxR+o

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.d01d0fe67352ecbb2dec6c9e754d0420.exe

    • Size

      74KB

    • MD5

      d01d0fe67352ecbb2dec6c9e754d0420

    • SHA1

      cfd8e7192b6508c6426cdde64a757c4f9f022de1

    • SHA256

      8685d355c56c8e3c9f3c5d6345355774c72a11e81e7d74429ea272ad03481819

    • SHA512

      2ce7d391f510ad2faf5e4c60c473b61180c45e8f7977ab99c20cab1845dc10b3cc3f33b1bc0feef7554af0a6aa15a3ac3474172055f97c1e87e6cbc5115ab106

    • SSDEEP

      1536:AuShgIpYgWlNYjlOGkuz2JWv2MbBeFypMmUoE:ZIagR8NC0WxR+o

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks