Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.a648f...JC.exe

windows7-x64

10

NEAS.a648f...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.a648fc8120d844ae3f1e2f6ca0cd6340_JC.exe

  • Size

    52KB

  • Sample

    231103-bjfn4ahg9s

  • MD5

    a648fc8120d844ae3f1e2f6ca0cd6340

  • SHA1

    6dc60e0cba30da751dfca585442d15cbe24dc72b

  • SHA256

    9a5faec2edb67b7fb58890d8c157b4b89c83fd548cbd0c1e6c23b27071e9a57a

  • SHA512

    d8f186365f3a565d9172a937d032a64d9cd6d18b2444b78c60b9d30138768a58f2efa94e75cfb84ff76bd179b4341bd12c3093871a150cb61a68662d579d6c83

  • SSDEEP

    768:3t/M5TQKpPrwpJHjeYdbtb3B1N7Y/yumYP1zgxFyF4/1H5F/snSMABvKWe:3UwpJHjBRtSaCcjMAdKZ

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.a648fc8120d844ae3f1e2f6ca0cd6340_JC.exe

    • Size

      52KB

    • MD5

      a648fc8120d844ae3f1e2f6ca0cd6340

    • SHA1

      6dc60e0cba30da751dfca585442d15cbe24dc72b

    • SHA256

      9a5faec2edb67b7fb58890d8c157b4b89c83fd548cbd0c1e6c23b27071e9a57a

    • SHA512

      d8f186365f3a565d9172a937d032a64d9cd6d18b2444b78c60b9d30138768a58f2efa94e75cfb84ff76bd179b4341bd12c3093871a150cb61a68662d579d6c83

    • SSDEEP

      768:3t/M5TQKpPrwpJHjeYdbtb3B1N7Y/yumYP1zgxFyF4/1H5F/snSMABvKWe:3UwpJHjBRtSaCcjMAdKZ

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks