Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.e8a4d...10.exe

windows7-x64

10

NEAS.e8a4d...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e8a4d64e488e459784cbf08861622a10.exe

  • Size

    288KB

  • Sample

    231111-f3hp1sce59

  • MD5

    e8a4d64e488e459784cbf08861622a10

  • SHA1

    fbff229d61f109dcc0fd5a470a0faf2b736c4739

  • SHA256

    d61a1c56dae80440d1587d478e9b9f2b7c9e9198b9a84a2bf909355407572fd9

  • SHA512

    57f09f81f9621689385ceeef809dd05e8079ea8f2f8d517ad956571d194728bf3837a148a065eefc669bc70ea5d1fae2df1378f0b3f5e0d6f7d40aa88d27fdd5

  • SSDEEP

    3072:qX9Ov+emnkIu3y/+VoAVT8S3a+LaYthj7ZTNf9Nm2C4smf9vms+CzFW4r2RKihOZ:y9O9mlH/DA6N+uwLN7Rjr

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.e8a4d64e488e459784cbf08861622a10.exe

    • Size

      288KB

    • MD5

      e8a4d64e488e459784cbf08861622a10

    • SHA1

      fbff229d61f109dcc0fd5a470a0faf2b736c4739

    • SHA256

      d61a1c56dae80440d1587d478e9b9f2b7c9e9198b9a84a2bf909355407572fd9

    • SHA512

      57f09f81f9621689385ceeef809dd05e8079ea8f2f8d517ad956571d194728bf3837a148a065eefc669bc70ea5d1fae2df1378f0b3f5e0d6f7d40aa88d27fdd5

    • SSDEEP

      3072:qX9Ov+emnkIu3y/+VoAVT8S3a+LaYthj7ZTNf9Nm2C4smf9vms+CzFW4r2RKihOZ:y9O9mlH/DA6N+uwLN7Rjr

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks