Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.b72f2...d8.exe

windows7-x64

10

NEAS.b72f2...d8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.b72f254acd6aaf8a6a5c75e670303fd8.exe

  • Size

    89KB

  • Sample

    231116-v4e3vafc2w

  • MD5

    b72f254acd6aaf8a6a5c75e670303fd8

  • SHA1

    e4c427d9f94b2c5f3178407c360db623560614b1

  • SHA256

    238feb20915cf32941f12f22e15c288a7febaac5f7a6d3aa9877a8b1d55e9c49

  • SHA512

    3b516056a5175e2c13f2211e84aa3c09379c9679ddcf2410dc06d531224ae0aadc40611115b8ed1a70c0eb393cb19416b7129e4993117422f212824a13d7edbf

  • SSDEEP

    1536:laqPMAtYCK93h9wONYMpkiQNKaio81BfuL9WWge6RQgR+KRFR3RzR1URJrCiuiN7:xPMAtYLhh9wbIkrKaioImLQM6egjb5Zw

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.b72f254acd6aaf8a6a5c75e670303fd8.exe

    • Size

      89KB

    • MD5

      b72f254acd6aaf8a6a5c75e670303fd8

    • SHA1

      e4c427d9f94b2c5f3178407c360db623560614b1

    • SHA256

      238feb20915cf32941f12f22e15c288a7febaac5f7a6d3aa9877a8b1d55e9c49

    • SHA512

      3b516056a5175e2c13f2211e84aa3c09379c9679ddcf2410dc06d531224ae0aadc40611115b8ed1a70c0eb393cb19416b7129e4993117422f212824a13d7edbf

    • SSDEEP

      1536:laqPMAtYCK93h9wONYMpkiQNKaio81BfuL9WWge6RQgR+KRFR3RzR1URJrCiuiN7:xPMAtYLhh9wbIkrKaioImLQM6egjb5Zw

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks