Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.f9e04...c0.exe

windows7-x64

10

NEAS.f9e04...c0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f9e04f5ea0437ef23b94667f1e7d33c0.exe

  • Size

    59KB

  • Sample

    231101-rq7zxshf9z

  • MD5

    f9e04f5ea0437ef23b94667f1e7d33c0

  • SHA1

    49af5b633550db4b081f0600e6b87f1bf0d6b8db

  • SHA256

    d80a50ae0f4ee6bc57b3834e8cfe70b8c8fa67eaa3ca27dbb40de857bbd0a5ba

  • SHA512

    96a36a554dac387c14d4375471c005654196478f4a772ac67b0e76886f95f85e6dbd754b6dd9ae6947b338512e34c0b96afbf29a7967e30a8cc6cccfc731dfeb

  • SSDEEP

    768:dLx31NCIDzxG8cg5vlfYcsLKIH11gBKJUhp2p/1H5UXdnhfXaXdnh:dLx37zxrY5fpGhp2LQO

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.f9e04f5ea0437ef23b94667f1e7d33c0.exe

    • Size

      59KB

    • MD5

      f9e04f5ea0437ef23b94667f1e7d33c0

    • SHA1

      49af5b633550db4b081f0600e6b87f1bf0d6b8db

    • SHA256

      d80a50ae0f4ee6bc57b3834e8cfe70b8c8fa67eaa3ca27dbb40de857bbd0a5ba

    • SHA512

      96a36a554dac387c14d4375471c005654196478f4a772ac67b0e76886f95f85e6dbd754b6dd9ae6947b338512e34c0b96afbf29a7967e30a8cc6cccfc731dfeb

    • SSDEEP

      768:dLx31NCIDzxG8cg5vlfYcsLKIH11gBKJUhp2p/1H5UXdnhfXaXdnh:dLx37zxrY5fpGhp2LQO

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks