Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.20d9a...b0.exe

windows7-x64

10

NEAS.20d9a...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.20d9a094182beea7d04af070e27d62b0.exe

  • Size

    59KB

  • Sample

    231101-q7z5zaac5x

  • MD5

    20d9a094182beea7d04af070e27d62b0

  • SHA1

    4aa0294429e33f409fdd419211390b4ee698649d

  • SHA256

    842da3e64623ddd181c8c60bf62cfa3b43afaa14b188108b4642d55f75451d43

  • SHA512

    ffaef146c9d04fab5fa2fcb020377aa17a77050b10506df7e7524253f31ac37c45e3f6726d4b8763b06b73e735044948ad56ddff96a85c4ff4aff9b89cc26a9c

  • SSDEEP

    768:EvR2anefanVtcq+oyAipqwWlXvsd0oz+cTBG4lPTZ/1H5vD5nf1fZMEBFELvkVgs:g20RnVOq+oCzWlo0oZFGOfDNCyVso

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.20d9a094182beea7d04af070e27d62b0.exe

    • Size

      59KB

    • MD5

      20d9a094182beea7d04af070e27d62b0

    • SHA1

      4aa0294429e33f409fdd419211390b4ee698649d

    • SHA256

      842da3e64623ddd181c8c60bf62cfa3b43afaa14b188108b4642d55f75451d43

    • SHA512

      ffaef146c9d04fab5fa2fcb020377aa17a77050b10506df7e7524253f31ac37c45e3f6726d4b8763b06b73e735044948ad56ddff96a85c4ff4aff9b89cc26a9c

    • SSDEEP

      768:EvR2anefanVtcq+oyAipqwWlXvsd0oz+cTBG4lPTZ/1H5vD5nf1fZMEBFELvkVgs:g20RnVOq+oCzWlo0oZFGOfDNCyVso

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks