Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.0c949...a0.exe

windows7-x64

10

NEAS.0c949...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.0c949f04e0e668892d6232e19ab4fea0.exe

  • Size

    96KB

  • Sample

    231028-wmqcxsfb93

  • MD5

    0c949f04e0e668892d6232e19ab4fea0

  • SHA1

    87641b98c0fda524f2f3896bf11b692607f48da4

  • SHA256

    fb7e9aec98cc326fff46b0d9bf7820fc48a250955674c159064f8850fe59923d

  • SHA512

    45998a6e31e081af2cb0ccab02f1376b55cc3281c474a40c697190cf5ec28f9afd38cef376decf5800ad328d8b7d6b562f02f20fd743b9f01b900037ec5ad9ee

  • SSDEEP

    1536:B7rD5ytn9RHkDD9HrXmhB7UET997DqTczny7yUQkjHJo5g+nuRQ+pR5R45WtqV9h:hrFytn9RStzmhduByRg+nue+pHrtG9Mc

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.0c949f04e0e668892d6232e19ab4fea0.exe

    • Size

      96KB

    • MD5

      0c949f04e0e668892d6232e19ab4fea0

    • SHA1

      87641b98c0fda524f2f3896bf11b692607f48da4

    • SHA256

      fb7e9aec98cc326fff46b0d9bf7820fc48a250955674c159064f8850fe59923d

    • SHA512

      45998a6e31e081af2cb0ccab02f1376b55cc3281c474a40c697190cf5ec28f9afd38cef376decf5800ad328d8b7d6b562f02f20fd743b9f01b900037ec5ad9ee

    • SSDEEP

      1536:B7rD5ytn9RHkDD9HrXmhB7UET997DqTczny7yUQkjHJo5g+nuRQ+pR5R45WtqV9h:hrFytn9RStzmhduByRg+nue+pHrtG9Mc

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks