Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.6dfbb...c0.exe

windows7-x64

10

NEAS.6dfbb...c0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.6dfbbafb1da56c54cb225c894c70c4c0.exe

  • Size

    120KB

  • Sample

    231107-aja8yaac82

  • MD5

    6dfbbafb1da56c54cb225c894c70c4c0

  • SHA1

    0cbbacaff2dcca03110c65ffc3b716aeff0beb02

  • SHA256

    be7b5211c513c191481eda3c5054fecd2020fca8fc2a64d36e6c047738b3d4d6

  • SHA512

    089b8271ce7ae918e6b1c758ae0e7eafe9d785fc4f48c782cc08e6c3bb7fbcf10726e356477e929cdfde51f111677534c239152d10f4aecf90c8484d33446c29

  • SSDEEP

    1536:k4Se+aZGYSm3meoXfgL4iv6n82Lq9TAjKw4lIt8AgH2v9jw2LhU:k4SezZG7e4Z+6n1q9UKw4lIGH4dW

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.6dfbbafb1da56c54cb225c894c70c4c0.exe

    • Size

      120KB

    • MD5

      6dfbbafb1da56c54cb225c894c70c4c0

    • SHA1

      0cbbacaff2dcca03110c65ffc3b716aeff0beb02

    • SHA256

      be7b5211c513c191481eda3c5054fecd2020fca8fc2a64d36e6c047738b3d4d6

    • SHA512

      089b8271ce7ae918e6b1c758ae0e7eafe9d785fc4f48c782cc08e6c3bb7fbcf10726e356477e929cdfde51f111677534c239152d10f4aecf90c8484d33446c29

    • SSDEEP

      1536:k4Se+aZGYSm3meoXfgL4iv6n82Lq9TAjKw4lIt8AgH2v9jw2LhU:k4SezZG7e4Z+6n1q9UKw4lIGH4dW

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks