Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.b4af7...9f.exe

windows7-x64

10

NEAS.b4af7...9f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.b4af75ef7b5d5d6cf66b03ce4ee67c9f.exe

  • Size

    77KB

  • Sample

    231115-vgetkach49

  • MD5

    b4af75ef7b5d5d6cf66b03ce4ee67c9f

  • SHA1

    d7856e6efbbb3cc98bae9d71e6640ef1c632eaa9

  • SHA256

    f026dab3058bddb9db7ae4cdc15cce809ddd308c6f582bb3530661853e748a29

  • SHA512

    0ee13349676cd3f4e8c39bd78fb1d551967944dc8290a9ca1f2803f457711838091c89bc6f3ccc47fa634a11d11e4c2c5ca959907c6a87bb983f831fe7683027

  • SSDEEP

    1536:0PhMVD0fSDquwvHXjU7sGdgO8bBBWoIxiKodi0nO4+P:ShMVD01vHXoiBB5iy

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.b4af75ef7b5d5d6cf66b03ce4ee67c9f.exe

    • Size

      77KB

    • MD5

      b4af75ef7b5d5d6cf66b03ce4ee67c9f

    • SHA1

      d7856e6efbbb3cc98bae9d71e6640ef1c632eaa9

    • SHA256

      f026dab3058bddb9db7ae4cdc15cce809ddd308c6f582bb3530661853e748a29

    • SHA512

      0ee13349676cd3f4e8c39bd78fb1d551967944dc8290a9ca1f2803f457711838091c89bc6f3ccc47fa634a11d11e4c2c5ca959907c6a87bb983f831fe7683027

    • SSDEEP

      1536:0PhMVD0fSDquwvHXjU7sGdgO8bBBWoIxiKodi0nO4+P:ShMVD01vHXoiBB5iy

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks