Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.e4115...90.exe

windows7-x64

10

NEAS.e4115...90.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e4115b0da4cd1d30ff38825a8b3e7a90.exe

  • Size

    364KB

  • Sample

    231022-v3nctsbh44

  • MD5

    e4115b0da4cd1d30ff38825a8b3e7a90

  • SHA1

    c8ae5feddcf25e416a92f8a5bca9a44a2eb34b99

  • SHA256

    558d68513089ff6945ccfd09bbc14f5cf305e31fae438abc5b26074347472d4b

  • SHA512

    ab2605e1be4995de7f896a14650b39686d53184ba88dce0c38ff04cd25b97bd1e37a734bf9c68da37a08a9647a46522f0c4865f86998ad022f804692c94f52da

  • SSDEEP

    6144:rgBRzRy16cdxSLR/4b7uMgu6b0jxSLR/DGdp48aA9GxSLR/4b7uMgu6b0jxSLR/:rgBeEuxSLSOMgFoxSL5GdJaA8xSLSOMK

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.e4115b0da4cd1d30ff38825a8b3e7a90.exe

    • Size

      364KB

    • MD5

      e4115b0da4cd1d30ff38825a8b3e7a90

    • SHA1

      c8ae5feddcf25e416a92f8a5bca9a44a2eb34b99

    • SHA256

      558d68513089ff6945ccfd09bbc14f5cf305e31fae438abc5b26074347472d4b

    • SHA512

      ab2605e1be4995de7f896a14650b39686d53184ba88dce0c38ff04cd25b97bd1e37a734bf9c68da37a08a9647a46522f0c4865f86998ad022f804692c94f52da

    • SSDEEP

      6144:rgBRzRy16cdxSLR/4b7uMgu6b0jxSLR/DGdp48aA9GxSLR/4b7uMgu6b0jxSLR/:rgBeEuxSLSOMgFoxSL5GdJaA8xSLSOMK

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks