Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.e6144...00.exe

windows7-x64

10

NEAS.e6144...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e6144e70baa16af217dcb08f7f934e00.exe

  • Size

    451KB

  • Sample

    231103-le3yyahe64

  • MD5

    e6144e70baa16af217dcb08f7f934e00

  • SHA1

    4be43feddd3d41521ad07a60021e0d4b24db2097

  • SHA256

    9e9606165c866579b6f70ffb1217e0c3e1384557b0675537f3ad5f83ec2a50ba

  • SHA512

    1e3b636f34c2544b5cf1b3b2b6a5740a96cce3b9c1219f2376b8cbba598a370aebb6a879ebc6be1dcc1f08415b2224c5ef8a68a827b5ac806ef36d528c58a6ea

  • SSDEEP

    6144:ydgXPQ///NR5fLYG3eujPQ///NR5fqZo4tjS6Y:yj/NcZ7/NC64tm6Y

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.e6144e70baa16af217dcb08f7f934e00.exe

    • Size

      451KB

    • MD5

      e6144e70baa16af217dcb08f7f934e00

    • SHA1

      4be43feddd3d41521ad07a60021e0d4b24db2097

    • SHA256

      9e9606165c866579b6f70ffb1217e0c3e1384557b0675537f3ad5f83ec2a50ba

    • SHA512

      1e3b636f34c2544b5cf1b3b2b6a5740a96cce3b9c1219f2376b8cbba598a370aebb6a879ebc6be1dcc1f08415b2224c5ef8a68a827b5ac806ef36d528c58a6ea

    • SSDEEP

      6144:ydgXPQ///NR5fLYG3eujPQ///NR5fqZo4tjS6Y:yj/NcZ7/NC64tm6Y

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks