Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.60591...50.exe

windows7-x64

10

NEAS.60591...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.60591ee649dceee8a35c981bcc517950.exe

  • Size

    288KB

  • Sample

    231103-l6l5haab49

  • MD5

    60591ee649dceee8a35c981bcc517950

  • SHA1

    4cd9f055454e7229af64cfb1c3a9e5ae011040cb

  • SHA256

    311429a7aac511dcaee4d5c19aa3ea5899e99981dcdae79eee8633f0b8619ff8

  • SHA512

    37dff14a0cd2cd8056c8aa6cf00f858b7e1067626cb9d8ce404916c1d79f6fafbf7061b7d7a90840ec7c258f3b0b1ffc4facc0dbf63116890d4a423a4763cbb0

  • SSDEEP

    3072:hG7RRRJ0494aIAVdc5PDWJKSHYUydCjIcAVdc5PDWJKSHYICbIdqCbI3UA4iDJjJ:6ROaIAePDWJahAIcAePDWJaGA

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.60591ee649dceee8a35c981bcc517950.exe

    • Size

      288KB

    • MD5

      60591ee649dceee8a35c981bcc517950

    • SHA1

      4cd9f055454e7229af64cfb1c3a9e5ae011040cb

    • SHA256

      311429a7aac511dcaee4d5c19aa3ea5899e99981dcdae79eee8633f0b8619ff8

    • SHA512

      37dff14a0cd2cd8056c8aa6cf00f858b7e1067626cb9d8ce404916c1d79f6fafbf7061b7d7a90840ec7c258f3b0b1ffc4facc0dbf63116890d4a423a4763cbb0

    • SSDEEP

      3072:hG7RRRJ0494aIAVdc5PDWJKSHYUydCjIcAVdc5PDWJKSHYICbIdqCbI3UA4iDJjJ:6ROaIAePDWJahAIcAePDWJaGA

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks