Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.e2cd5...ff.exe

windows7-x64

10

NEAS.e2cd5...ff.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e2cd5150167eb5b3b7f27b15804976ff.exe

  • Size

    880KB

  • Sample

    231111-m14b9seh43

  • MD5

    e2cd5150167eb5b3b7f27b15804976ff

  • SHA1

    1a3c1af1787bf52cfbb33a7b9a87b39755c03b5c

  • SHA256

    df83bfe85a665ecd8d09ea98777e6e581a08771de210f006b0ae1a7740da032a

  • SHA512

    b004842fd362821c6953c9e0c7b7e40f304d8dfd3a3025798b786efe13effca28006c5fe32f64e6ad0c86fc0d2be0b36d9838c5fb66102563de6b64205d4b136

  • SSDEEP

    12288:4cSImvr6IveDVqvQ6IvYvc6IveDVqvQ6IvGm05XEvG6IveDVqvQ6IvYvc6IveDVB:tSRq5h3q5hL6X1q5h3q5h

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.e2cd5150167eb5b3b7f27b15804976ff.exe

    • Size

      880KB

    • MD5

      e2cd5150167eb5b3b7f27b15804976ff

    • SHA1

      1a3c1af1787bf52cfbb33a7b9a87b39755c03b5c

    • SHA256

      df83bfe85a665ecd8d09ea98777e6e581a08771de210f006b0ae1a7740da032a

    • SHA512

      b004842fd362821c6953c9e0c7b7e40f304d8dfd3a3025798b786efe13effca28006c5fe32f64e6ad0c86fc0d2be0b36d9838c5fb66102563de6b64205d4b136

    • SSDEEP

      12288:4cSImvr6IveDVqvQ6IvYvc6IveDVqvQ6IvGm05XEvG6IveDVqvQ6IvYvc6IveDVB:tSRq5h3q5hL6X1q5h3q5h

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks