Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.30a6a...00.exe

windows7-x64

10

NEAS.30a6a...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.30a6a7f2ea3c0473151d340528fe2f00.exe

  • Size

    90KB

  • Sample

    231116-234s5sbd33

  • MD5

    30a6a7f2ea3c0473151d340528fe2f00

  • SHA1

    b1148bc0d3d22d5b80d06a78b6886b795e85d20c

  • SHA256

    6308b77a691ad7f5dbe8de3c61656fba81a64172d15760c69325bc51cfc2433f

  • SHA512

    2c9c0672b1c30a7c5e9b22bef4a553753b018a0843e9ec7d14d73448a6cc7a13bea9507839a3a4754aa55b76b97fa68b64fc2c0ac1f909b84d452935df10f4c4

  • SSDEEP

    1536:gy8lg7ALe0FCyEV9CnDyB58RY3PpR0q8sWDK08M3r1JiNrvVycxT8EibNWT74G5w:X7ibI1BtwDKKmrvz6bUTsG5u/Ub0+NK

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.30a6a7f2ea3c0473151d340528fe2f00.exe

    • Size

      90KB

    • MD5

      30a6a7f2ea3c0473151d340528fe2f00

    • SHA1

      b1148bc0d3d22d5b80d06a78b6886b795e85d20c

    • SHA256

      6308b77a691ad7f5dbe8de3c61656fba81a64172d15760c69325bc51cfc2433f

    • SHA512

      2c9c0672b1c30a7c5e9b22bef4a553753b018a0843e9ec7d14d73448a6cc7a13bea9507839a3a4754aa55b76b97fa68b64fc2c0ac1f909b84d452935df10f4c4

    • SSDEEP

      1536:gy8lg7ALe0FCyEV9CnDyB58RY3PpR0q8sWDK08M3r1JiNrvVycxT8EibNWT74G5w:X7ibI1BtwDKKmrvz6bUTsG5u/Ub0+NK

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks