Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.1ab89...30.exe

windows7-x64

10

NEAS.1ab89...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.1ab89be1602a6b59420e9ca4d4d9c630.exe

  • Size

    128KB

  • Sample

    231111-p34rxsgc83

  • MD5

    1ab89be1602a6b59420e9ca4d4d9c630

  • SHA1

    ef79259d179d34208b386dc3badaae8ec680162e

  • SHA256

    b7c5549a0ffc9b52b9db631a0bd910ad0168757f9364151abbb1a33bebd8017a

  • SHA512

    d87d0d6d80f28a89f3aada0ccb1538e0a1f0dc2ab999910e946eac91e8a9360d2480fbdc4277613dd1c99afc38cdba5d4888255dea04b86235c31384c0158fb3

  • SSDEEP

    3072:KZJN7OAX5xgzvNjeRSJdEN0s4WE+3S9pui6yYPaI7DX:KZJNrX5xgswENm+3Mpui6yYPaI/

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.1ab89be1602a6b59420e9ca4d4d9c630.exe

    • Size

      128KB

    • MD5

      1ab89be1602a6b59420e9ca4d4d9c630

    • SHA1

      ef79259d179d34208b386dc3badaae8ec680162e

    • SHA256

      b7c5549a0ffc9b52b9db631a0bd910ad0168757f9364151abbb1a33bebd8017a

    • SHA512

      d87d0d6d80f28a89f3aada0ccb1538e0a1f0dc2ab999910e946eac91e8a9360d2480fbdc4277613dd1c99afc38cdba5d4888255dea04b86235c31384c0158fb3

    • SSDEEP

      3072:KZJN7OAX5xgzvNjeRSJdEN0s4WE+3S9pui6yYPaI7DX:KZJNrX5xgswENm+3Mpui6yYPaI/

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks