Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.c3454...d0.exe

windows7-x64

10

NEAS.c3454...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.c34547edac7d176e94f1def107d7ddd0.exe

  • Size

    1.4MB

  • Sample

    231115-ejdraabg76

  • MD5

    c34547edac7d176e94f1def107d7ddd0

  • SHA1

    f2dc4ab193698f5304979de0b81c3e9f6cbe49cc

  • SHA256

    80fc3bb8cc6f539d19d2cc3f43617442d4f0cb020aac2da6e2eaf07fcb885a5c

  • SHA512

    8adf7c77fdf7bd9ff9f3596243287d6b9f84c44861d054c06f35cc70841fa43f664919cbcec76475ebbed218afddee20aa1262809f5df3ae867035ae7593fcd5

  • SSDEEP

    12288:WlKLChs15tLsGUNUs15tLsaz+fv29999ts15tLsGUNUs15tLsWs15tLsGUNUs15s:WwC+yGUNHyJyGUNHyxyGUNHyJyGUNHy

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.c34547edac7d176e94f1def107d7ddd0.exe

    • Size

      1.4MB

    • MD5

      c34547edac7d176e94f1def107d7ddd0

    • SHA1

      f2dc4ab193698f5304979de0b81c3e9f6cbe49cc

    • SHA256

      80fc3bb8cc6f539d19d2cc3f43617442d4f0cb020aac2da6e2eaf07fcb885a5c

    • SHA512

      8adf7c77fdf7bd9ff9f3596243287d6b9f84c44861d054c06f35cc70841fa43f664919cbcec76475ebbed218afddee20aa1262809f5df3ae867035ae7593fcd5

    • SSDEEP

      12288:WlKLChs15tLsGUNUs15tLsaz+fv29999ts15tLsGUNUs15tLsWs15tLsGUNUs15s:WwC+yGUNHyJyGUNHyxyGUNHyJyGUNHy

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks