Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

NEAS.83076...10.exe

windows7-x64

7

NEAS.83076...10.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.830769424deb6aa84ef75bc8dcb63e10.exe

  • Size

    487KB

  • Sample

    231104-r2d6zsdf73

  • MD5

    830769424deb6aa84ef75bc8dcb63e10

  • SHA1

    64c937f287281c65cd13f9c49cd9b98f29641f51

  • SHA256

    9c95af3438367b4cbeaa16cce6ed6ff8e407db48de3ab75021b6982867f7a2c3

  • SHA512

    f9dba984c9dbae2615e970c48de9f8f6ef3a59f57977b6fe2c2e0e236b57ca88801e0f72eb6a8f69c040bfd41e96f4dd0c6793e6a37f0774fe6f8318ca89be4d

  • SSDEEP

    6144:QdspDeDrxkg/vrMuJIgwhEFHyOrJcX/Pgqwzm5IzkWjS4e4azExBKO1t4Kb70NqT:28kxNhOZElO5kkWjhD4AOj5lG

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      NEAS.830769424deb6aa84ef75bc8dcb63e10.exe

    • Size

      487KB

    • MD5

      830769424deb6aa84ef75bc8dcb63e10

    • SHA1

      64c937f287281c65cd13f9c49cd9b98f29641f51

    • SHA256

      9c95af3438367b4cbeaa16cce6ed6ff8e407db48de3ab75021b6982867f7a2c3

    • SHA512

      f9dba984c9dbae2615e970c48de9f8f6ef3a59f57977b6fe2c2e0e236b57ca88801e0f72eb6a8f69c040bfd41e96f4dd0c6793e6a37f0774fe6f8318ca89be4d

    • SSDEEP

      6144:QdspDeDrxkg/vrMuJIgwhEFHyOrJcX/Pgqwzm5IzkWjS4e4azExBKO1t4Kb70NqT:28kxNhOZElO5kkWjhD4AOj5lG

    Score
    7/10
    persistenceupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks