Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.d8dff...30.exe

windows7-x64

10

NEAS.d8dff...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d8dffd80246e4e486173781eb3cb9b30.exe

  • Size

    790KB

  • Sample

    231028-y1xehadb94

  • MD5

    d8dffd80246e4e486173781eb3cb9b30

  • SHA1

    8bd1f19603121853f9d17b0ebd582ff2c17aaed7

  • SHA256

    ab12eeab68daf796ff7865ad1d323a133e3f3961d309c4e2a35d76246f9f32af

  • SHA512

    7ba042158487ec97ea92aa941927723fac77402477a187406fe7c9e0a317d4a58399293ad8a499e16949ba1419536011c860390ee229d42d3964c938fcd7b0d1

  • SSDEEP

    12288:lt51TTfZxFB24lwR45FB24lJ87g7/VycgE81lgxaa79y:znPLPEoIlg17o

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.d8dffd80246e4e486173781eb3cb9b30.exe

    • Size

      790KB

    • MD5

      d8dffd80246e4e486173781eb3cb9b30

    • SHA1

      8bd1f19603121853f9d17b0ebd582ff2c17aaed7

    • SHA256

      ab12eeab68daf796ff7865ad1d323a133e3f3961d309c4e2a35d76246f9f32af

    • SHA512

      7ba042158487ec97ea92aa941927723fac77402477a187406fe7c9e0a317d4a58399293ad8a499e16949ba1419536011c860390ee229d42d3964c938fcd7b0d1

    • SSDEEP

      12288:lt51TTfZxFB24lwR45FB24lJ87g7/VycgE81lgxaa79y:znPLPEoIlg17o

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks