Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.613af...45.exe

windows7-x64

10

NEAS.613af...45.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.613af01adff3ea76f7fb19effec40f45.exe

  • Size

    322KB

  • Sample

    231106-xh8jdaeg47

  • MD5

    613af01adff3ea76f7fb19effec40f45

  • SHA1

    dec46ba00ee65638bf469a2fef036e8df6f1cd43

  • SHA256

    ca820e0860142aa5dbcbe312f878bfab519bd4485eb167de53c27d95d92adf69

  • SHA512

    e1f45ee13bfc656ea54317f06d94a59639a4e35ba8bcdab2e3fc86f74f771e4fe28880104f6be919adda760b90f89c8cd259081fc6be2b94185bc15c4a11fe27

  • SSDEEP

    1536:QpNt83/0ZbzdJqIIyrUlLc9+Q0i/W96TOK2PCSRQyaTmDhdF+PhJFTq1dlCsTx4L:AP838ZHXtIyrIs0iewKheVSVGZ3Odl2

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.613af01adff3ea76f7fb19effec40f45.exe

    • Size

      322KB

    • MD5

      613af01adff3ea76f7fb19effec40f45

    • SHA1

      dec46ba00ee65638bf469a2fef036e8df6f1cd43

    • SHA256

      ca820e0860142aa5dbcbe312f878bfab519bd4485eb167de53c27d95d92adf69

    • SHA512

      e1f45ee13bfc656ea54317f06d94a59639a4e35ba8bcdab2e3fc86f74f771e4fe28880104f6be919adda760b90f89c8cd259081fc6be2b94185bc15c4a11fe27

    • SSDEEP

      1536:QpNt83/0ZbzdJqIIyrUlLc9+Q0i/W96TOK2PCSRQyaTmDhdF+PhJFTq1dlCsTx4L:AP838ZHXtIyrIs0iewKheVSVGZ3Odl2

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks