Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.77992...c0.exe

windows7-x64

10

NEAS.77992...c0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.77992f066b4ff585d094c9cb980d03c0.exe

  • Size

    337KB

  • Sample

    231101-rh24pseh44

  • MD5

    77992f066b4ff585d094c9cb980d03c0

  • SHA1

    eba5936bd8226fcb1dbf29fc794b3a21bb44bd9a

  • SHA256

    ad3b30326fd467a15c1414c4e185e2dfa0358a1e94f04d1bfc4c2fe865bc758a

  • SHA512

    45280e5b3eaa8112d572ce36421255d67c645280b956740ed8b9c904c786ae79826321ff23f7ef3d5c2f20ab6aec84ffb188d3e37af08c7228298156d28c98e1

  • SSDEEP

    3072:E9yDWk7zX4k7vjboqnGgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:2y6kX4xqnG1+fIyG5jZkCwi8r

Score
10/10
njratpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.77992f066b4ff585d094c9cb980d03c0.exe

    • Size

      337KB

    • MD5

      77992f066b4ff585d094c9cb980d03c0

    • SHA1

      eba5936bd8226fcb1dbf29fc794b3a21bb44bd9a

    • SHA256

      ad3b30326fd467a15c1414c4e185e2dfa0358a1e94f04d1bfc4c2fe865bc758a

    • SHA512

      45280e5b3eaa8112d572ce36421255d67c645280b956740ed8b9c904c786ae79826321ff23f7ef3d5c2f20ab6aec84ffb188d3e37af08c7228298156d28c98e1

    • SSDEEP

      3072:E9yDWk7zX4k7vjboqnGgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:2y6kX4xqnG1+fIyG5jZkCwi8r

    Score
    10/10
    njratpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks