Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.d40d2...d0.exe

windows7-x64

10

NEAS.d40d2...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d40d238f14ca8979c9a919823a5bfcd0.exe

  • Size

    582KB

  • Sample

    231102-vcem1abb8v

  • MD5

    d40d238f14ca8979c9a919823a5bfcd0

  • SHA1

    c29d89415b51850a24f4012cfe311e561c077f55

  • SHA256

    7bf0f335d20205c385f9f182939538edbd644bf640ad0d7cdecd41e1e1c3c394

  • SHA512

    5d433f13fe181bc9d546104c96d1eb46329e6863d4faeccdb11fc5c9ed3155f5c6126c3307488e45c88019e753c13e476f7c7124e4ed01845a273fccd378458a

  • SSDEEP

    12288:HbPZ2XFdYNrekcPYNrq6+gmCAYNrekcPYNrB:HbPkXFdakaF+gqakad

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.d40d238f14ca8979c9a919823a5bfcd0.exe

    • Size

      582KB

    • MD5

      d40d238f14ca8979c9a919823a5bfcd0

    • SHA1

      c29d89415b51850a24f4012cfe311e561c077f55

    • SHA256

      7bf0f335d20205c385f9f182939538edbd644bf640ad0d7cdecd41e1e1c3c394

    • SHA512

      5d433f13fe181bc9d546104c96d1eb46329e6863d4faeccdb11fc5c9ed3155f5c6126c3307488e45c88019e753c13e476f7c7124e4ed01845a273fccd378458a

    • SSDEEP

      12288:HbPZ2XFdYNrekcPYNrq6+gmCAYNrekcPYNrB:HbPkXFdakaF+gqakad

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks