Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.de1fd...30.exe

windows7-x64

10

NEAS.de1fd...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.de1fd0aac742cbf01ab05a33b234cb30.exe

  • Size

    4.5MB

  • Sample

    231103-q1qb7abe2s

  • MD5

    de1fd0aac742cbf01ab05a33b234cb30

  • SHA1

    b3031926110a17382b9bdac1b348cf75a5ebefff

  • SHA256

    f6e4fc4f639b4c993b9c16c72c847f5ba7a95d0f580f2cb9bdc3d8a8c6ac588b

  • SHA512

    4c7871844cbf4d5a4a0b550de6cbd7cd9c46fa887599ff02d426c05a10c838115183bcc4c0d5c439b98897bbc750ad5064885e05c87a072d45155d2a0e863606

  • SSDEEP

    49152:N95kB9f0VwEIV0MVp5fbVvOB9f0eB9f0S/B9f0HdVAVkB9f0VZHJVkB9f0TTVfdg:N95VG0uptJvlyVVHTBlg

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.de1fd0aac742cbf01ab05a33b234cb30.exe

    • Size

      4.5MB

    • MD5

      de1fd0aac742cbf01ab05a33b234cb30

    • SHA1

      b3031926110a17382b9bdac1b348cf75a5ebefff

    • SHA256

      f6e4fc4f639b4c993b9c16c72c847f5ba7a95d0f580f2cb9bdc3d8a8c6ac588b

    • SHA512

      4c7871844cbf4d5a4a0b550de6cbd7cd9c46fa887599ff02d426c05a10c838115183bcc4c0d5c439b98897bbc750ad5064885e05c87a072d45155d2a0e863606

    • SSDEEP

      49152:N95kB9f0VwEIV0MVp5fbVvOB9f0eB9f0S/B9f0HdVAVkB9f0VZHJVkB9f0TTVfdg:N95VG0uptJvlyVVHTBlg

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks