Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.0b99e...80.exe

windows7-x64

10

NEAS.0b99e...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.0b99e615006cf461ac8bea2d10cc3880.exe

  • Size

    178KB

  • Sample

    231117-engzhaeg26

  • MD5

    0b99e615006cf461ac8bea2d10cc3880

  • SHA1

    d48f1edd064ff96c16abe7e5a47e90305f408b99

  • SHA256

    9cf25c5a4da66b58b77c0a5124fd101494748f23ea873b9fd1cc6f11c0b03cd0

  • SHA512

    08a323d9b257f54e15f27f0d71ae3fbc04138c5495432d56e9b68fa5d340593ea9accb1502c6bd6c9e2e3a651d7b67f01dd6c36b7f13c9d006e0e7b997de54e1

  • SSDEEP

    3072:3w/twR+P3tIR4q//nxsskI/mhs7ZuoD46+oMQ1HeBWJ6Xlrrl6+ow:3w/twR+P9I9//nxsskI/gwNZ+zQ18Vrr

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.0b99e615006cf461ac8bea2d10cc3880.exe

    • Size

      178KB

    • MD5

      0b99e615006cf461ac8bea2d10cc3880

    • SHA1

      d48f1edd064ff96c16abe7e5a47e90305f408b99

    • SHA256

      9cf25c5a4da66b58b77c0a5124fd101494748f23ea873b9fd1cc6f11c0b03cd0

    • SHA512

      08a323d9b257f54e15f27f0d71ae3fbc04138c5495432d56e9b68fa5d340593ea9accb1502c6bd6c9e2e3a651d7b67f01dd6c36b7f13c9d006e0e7b997de54e1

    • SSDEEP

      3072:3w/twR+P3tIR4q//nxsskI/mhs7ZuoD46+oMQ1HeBWJ6Xlrrl6+ow:3w/twR+P9I9//nxsskI/gwNZ+zQ18Vrr

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks