Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.f1b9e...00.exe

windows7-x64

10

NEAS.f1b9e...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f1b9e7894fb6d03a5d94a8b76f9e0900.exe

  • Size

    93KB

  • Sample

    231116-lbfz1ahe42

  • MD5

    f1b9e7894fb6d03a5d94a8b76f9e0900

  • SHA1

    cd026f96b3f0af075aa0dafb177a927b2b0314aa

  • SHA256

    5e474beba5af4a18b62b14348531536bb2b4067284cb5082142f8860f5c42e23

  • SHA512

    6257e0f10f4d94743013cff0682c4c70da31d395593e17c72bd171a9bd6d2302768d235b6526b398dedb7b8050f6e6e4359ed1d288c4d7c830fa9aa1ffd6c946

  • SSDEEP

    1536:MVehh06ZMG4bDV93Nn+2IigSi9dFACI7XQP3sRQPRkRLJzeLD9N0iQGRNQR8RyVz:6ehh06ZKp6igSiMgP8ePSJdEN0s4WE+3

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.f1b9e7894fb6d03a5d94a8b76f9e0900.exe

    • Size

      93KB

    • MD5

      f1b9e7894fb6d03a5d94a8b76f9e0900

    • SHA1

      cd026f96b3f0af075aa0dafb177a927b2b0314aa

    • SHA256

      5e474beba5af4a18b62b14348531536bb2b4067284cb5082142f8860f5c42e23

    • SHA512

      6257e0f10f4d94743013cff0682c4c70da31d395593e17c72bd171a9bd6d2302768d235b6526b398dedb7b8050f6e6e4359ed1d288c4d7c830fa9aa1ffd6c946

    • SSDEEP

      1536:MVehh06ZMG4bDV93Nn+2IigSi9dFACI7XQP3sRQPRkRLJzeLD9N0iQGRNQR8RyVz:6ehh06ZKp6igSiMgP8ePSJdEN0s4WE+3

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks