Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.30c21...70.exe

windows7-x64

10

NEAS.30c21...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.30c21b9e2ebaf5040a7b97786a1b7370.exe

  • Size

    406KB

  • Sample

    231114-3bnhhsgd35

  • MD5

    30c21b9e2ebaf5040a7b97786a1b7370

  • SHA1

    9ae3977e30b3e9f088768048145a2e187a9dda97

  • SHA256

    ae984cabc74a447cd01f2d1a00f59be8821e452de8bdf333a6f5132ad23b4a72

  • SHA512

    d6bb7b50ba50ed2207fa182e2ec1a9f93ad2e1dbf6c4960e31bd99e218d231bdd80c599ec08308d4e38b206ecff9ce9f9af10e691209acfd32ae985aeaad4fec

  • SSDEEP

    6144:KTLVx0xBPU5U5Xj1XH5U5Xj83XH5U1XH5U5Xj8s5DXH5U5qXH5XXH5U5oXH:AVx0x2Mp3Ma3M3MvD3Mq3B3Mo3

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.30c21b9e2ebaf5040a7b97786a1b7370.exe

    • Size

      406KB

    • MD5

      30c21b9e2ebaf5040a7b97786a1b7370

    • SHA1

      9ae3977e30b3e9f088768048145a2e187a9dda97

    • SHA256

      ae984cabc74a447cd01f2d1a00f59be8821e452de8bdf333a6f5132ad23b4a72

    • SHA512

      d6bb7b50ba50ed2207fa182e2ec1a9f93ad2e1dbf6c4960e31bd99e218d231bdd80c599ec08308d4e38b206ecff9ce9f9af10e691209acfd32ae985aeaad4fec

    • SSDEEP

      6144:KTLVx0xBPU5U5Xj1XH5U5Xj83XH5U1XH5U5Xj8s5DXH5U5qXH5XXH5U5oXH:AVx0x2Mp3Ma3M3MvD3Mq3B3Mo3

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks