Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.f509d...80.exe

windows7-x64

10

NEAS.f509d...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f509dd77bce8c76ae6de12ef39311580.exe

  • Size

    564KB

  • Sample

    231117-en76paeg44

  • MD5

    f509dd77bce8c76ae6de12ef39311580

  • SHA1

    88c6d421bcdeb75a046302a35b6d3ed2bf9eacd9

  • SHA256

    404531cee92ab381b7a9abd53c797fb1e660c6b76f008dcc8337e2366e4e144c

  • SHA512

    ff4d8c265ba6c16bb500b47b2deea07454949bd925af0e25f9574112119d6082686533627370767498d84969a0c65a71cf0403769d7d574700e005e6b9d90f60

  • SSDEEP

    12288:Tx2WCvdBW5pvmexavWBW5pvzcvTBW5pvmexavWBW5pvYmzcvzBW5pvR:TIBixNBJBixNBDmSBw

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.f509dd77bce8c76ae6de12ef39311580.exe

    • Size

      564KB

    • MD5

      f509dd77bce8c76ae6de12ef39311580

    • SHA1

      88c6d421bcdeb75a046302a35b6d3ed2bf9eacd9

    • SHA256

      404531cee92ab381b7a9abd53c797fb1e660c6b76f008dcc8337e2366e4e144c

    • SHA512

      ff4d8c265ba6c16bb500b47b2deea07454949bd925af0e25f9574112119d6082686533627370767498d84969a0c65a71cf0403769d7d574700e005e6b9d90f60

    • SSDEEP

      12288:Tx2WCvdBW5pvmexavWBW5pvzcvTBW5pvmexavWBW5pvYmzcvzBW5pvR:TIBixNBJBixNBDmSBw

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks