Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.e76c9...70.exe

windows7-x64

10

NEAS.e76c9...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e76c9d083c21fe88550c870f37bc7a70.exe

  • Size

    384KB

  • Sample

    231102-x64kbsgb95

  • MD5

    e76c9d083c21fe88550c870f37bc7a70

  • SHA1

    72fabb733a2b9760ec2eb24a7943178239a7b190

  • SHA256

    4eb8f4df85782362755a5f5799dc7cc9b1fb2cc9ae6d07a54bab76be80323c8c

  • SHA512

    65d95173528747baac7790a55c7f0a51027decfb9eea73179a5f16aef04bb24f24fd998fb778f46d3c19914a6952ce8c679cc3bf04db2e040acc207a18cf0ae8

  • SSDEEP

    3072:+XPV1rvbkcfTAbnVAURfE+HAokWmvEie0RFz3yE2ZwVh16Mz7GFD0AlWU:+Xrv9fTYnRs+HLlD0rN2ZwVht740PU

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.e76c9d083c21fe88550c870f37bc7a70.exe

    • Size

      384KB

    • MD5

      e76c9d083c21fe88550c870f37bc7a70

    • SHA1

      72fabb733a2b9760ec2eb24a7943178239a7b190

    • SHA256

      4eb8f4df85782362755a5f5799dc7cc9b1fb2cc9ae6d07a54bab76be80323c8c

    • SHA512

      65d95173528747baac7790a55c7f0a51027decfb9eea73179a5f16aef04bb24f24fd998fb778f46d3c19914a6952ce8c679cc3bf04db2e040acc207a18cf0ae8

    • SSDEEP

      3072:+XPV1rvbkcfTAbnVAURfE+HAokWmvEie0RFz3yE2ZwVh16Mz7GFD0AlWU:+Xrv9fTYnRs+HLlD0rN2ZwVht740PU

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks