Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.ef68b...66.exe

windows7-x64

10

NEAS.ef68b...66.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.ef68b2cc03636f34377cc295454eb066.exe

  • Size

    95KB

  • Sample

    231101-kdq3bafg62

  • MD5

    ef68b2cc03636f34377cc295454eb066

  • SHA1

    a2e305a922e25a800575cfbe91e26f306f1c016f

  • SHA256

    06986a598a79693abfa6ee06701216a209348266d151133c466a043f686fb320

  • SHA512

    5fb8be4460026cf4f10af7e8cd4f1c95fb64203c7c7b54cebcd96f866944267dcef848366bb62fe50a3686f24646752e347ddb65e2f14f620bd02c950148483e

  • SSDEEP

    1536:4xms51468hwTSAGzAaNWZ70flIh1D84ecGEhN1r+OM6bOLXi8PmCofGV:4gsnShpAaNYu+hSTcGeV+DrLXfzoeV

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.ef68b2cc03636f34377cc295454eb066.exe

    • Size

      95KB

    • MD5

      ef68b2cc03636f34377cc295454eb066

    • SHA1

      a2e305a922e25a800575cfbe91e26f306f1c016f

    • SHA256

      06986a598a79693abfa6ee06701216a209348266d151133c466a043f686fb320

    • SHA512

      5fb8be4460026cf4f10af7e8cd4f1c95fb64203c7c7b54cebcd96f866944267dcef848366bb62fe50a3686f24646752e347ddb65e2f14f620bd02c950148483e

    • SSDEEP

      1536:4xms51468hwTSAGzAaNWZ70flIh1D84ecGEhN1r+OM6bOLXi8PmCofGV:4gsnShpAaNYu+hSTcGeV+DrLXfzoeV

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks