Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.e2c19...d0.exe

windows7-x64

10

NEAS.e2c19...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e2c1905335edd77f2bf26b7bd6f83cd0.exe

  • Size

    299KB

  • Sample

    231028-y2hyhaca8w

  • MD5

    e2c1905335edd77f2bf26b7bd6f83cd0

  • SHA1

    161725aab3c00885bbf07c2c683bc058b697ba62

  • SHA256

    afff38f14e5d4603ad87af9dfded2fce2650ff81316ce99267a8b2f36035f60a

  • SHA512

    35d8794f167a1c4981d49c2f0356b09dadbae4c97f8ad5627200f4042dc2842a52fda39c62b4eb6a473016cae297c4e75ac90ed9b7bd125ba336bcf7991dfe80

  • SSDEEP

    3072:r6+iJa/IpKGngl8cLedUEdmjRrz3TIUV4BKxAcL5CY2VePI8C3U/XYMJ2okZkRPp:GhJa8gm5CEdGTBki5CYtI8TAokZ2EA

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.e2c1905335edd77f2bf26b7bd6f83cd0.exe

    • Size

      299KB

    • MD5

      e2c1905335edd77f2bf26b7bd6f83cd0

    • SHA1

      161725aab3c00885bbf07c2c683bc058b697ba62

    • SHA256

      afff38f14e5d4603ad87af9dfded2fce2650ff81316ce99267a8b2f36035f60a

    • SHA512

      35d8794f167a1c4981d49c2f0356b09dadbae4c97f8ad5627200f4042dc2842a52fda39c62b4eb6a473016cae297c4e75ac90ed9b7bd125ba336bcf7991dfe80

    • SSDEEP

      3072:r6+iJa/IpKGngl8cLedUEdmjRrz3TIUV4BKxAcL5CY2VePI8C3U/XYMJ2okZkRPp:GhJa8gm5CEdGTBki5CYtI8TAokZ2EA

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks