Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.6cff7...JC.exe

windows7-x64

10

NEAS.6cff7...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.6cff7726cb8e4ed12feea67a0ded9ef0_JC.exe

  • Size

    476KB

  • Sample

    231102-xg7kpafh47

  • MD5

    6cff7726cb8e4ed12feea67a0ded9ef0

  • SHA1

    ba7f49f6017696610c0862a456b81f3bb4e1537d

  • SHA256

    02efc2643365c4ea5d11d922a0c6f9c2163f568dc97b4334a4ab06f913ca8a4d

  • SHA512

    42480a5893a897dedbdace9ccbd5f13aab83706bb6470b674bc38ada9df005197b1cec34fad9b777683949f9851087027956433d2f8d7248a9b6a0b48f18cf9a

  • SSDEEP

    12288:Gy1fJa9f01ZmW9fPGBrByvNv5VByvNv54B9f01ZmHByvNv5:Gy1fJa9f01ZmW9fPOsvr+vr4B9f01Zm0

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.6cff7726cb8e4ed12feea67a0ded9ef0_JC.exe

    • Size

      476KB

    • MD5

      6cff7726cb8e4ed12feea67a0ded9ef0

    • SHA1

      ba7f49f6017696610c0862a456b81f3bb4e1537d

    • SHA256

      02efc2643365c4ea5d11d922a0c6f9c2163f568dc97b4334a4ab06f913ca8a4d

    • SHA512

      42480a5893a897dedbdace9ccbd5f13aab83706bb6470b674bc38ada9df005197b1cec34fad9b777683949f9851087027956433d2f8d7248a9b6a0b48f18cf9a

    • SSDEEP

      12288:Gy1fJa9f01ZmW9fPGBrByvNv5VByvNv54B9f01ZmHByvNv5:Gy1fJa9f01ZmW9fPOsvr+vr4B9f01Zm0

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks