Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.b9a09...90.exe

windows7-x64

10

NEAS.b9a09...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.b9a09aedf90b464977c46a5a47e6a590.exe

  • Size

    227KB

  • Sample

    231111-xrpgvsbb4z

  • MD5

    b9a09aedf90b464977c46a5a47e6a590

  • SHA1

    839f4904c0673837ab6b5c5475020afa0e687ee3

  • SHA256

    f3c4be22b07811afa87e6d8a9c40b571e55aab87c370419c1f4db621e8dad384

  • SHA512

    8526067760227b72988664d77d6e681cbe823304c740e52a3e573a4d4e4969c37d99aaf952bbd0f73bed3518e7b26c405d5fa56bb927bce0b158df424afa1a4c

  • SSDEEP

    3072:JpZDqI2URPiSaMnRHm9jqLsFmsdYXmLlcJVIZen+Vcv2JBwwRBkBnReP2+x7zqgF:jR5RqjwszeXmr8SeNpgdyuH1l

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.b9a09aedf90b464977c46a5a47e6a590.exe

    • Size

      227KB

    • MD5

      b9a09aedf90b464977c46a5a47e6a590

    • SHA1

      839f4904c0673837ab6b5c5475020afa0e687ee3

    • SHA256

      f3c4be22b07811afa87e6d8a9c40b571e55aab87c370419c1f4db621e8dad384

    • SHA512

      8526067760227b72988664d77d6e681cbe823304c740e52a3e573a4d4e4969c37d99aaf952bbd0f73bed3518e7b26c405d5fa56bb927bce0b158df424afa1a4c

    • SSDEEP

      3072:JpZDqI2URPiSaMnRHm9jqLsFmsdYXmLlcJVIZen+Vcv2JBwwRBkBnReP2+x7zqgF:jR5RqjwszeXmr8SeNpgdyuH1l

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks