Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

7

NEAS.58129...8a.exe

windows7-x64

10

NEAS.58129...8a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.58129d574276d13cf0744a87d51ee28a.exe

  • Size

    19KB

  • Sample

    231117-vze72sbg23

  • MD5

    58129d574276d13cf0744a87d51ee28a

  • SHA1

    d6ea309607c33a4b064700a4f8b521e5abca5642

  • SHA256

    6f363e914c2b4f121513e2dc9988001d09ce014c20a307e86d8fd039acf23c5a

  • SHA512

    2bfb0d2d3d3ece406c51b83f443f2554679c308463ce934eaa714e9f933f542c31960e205c34df80918af088e077935b62bb006c4b3f05e4ea5d34e7870080aa

  • SSDEEP

    384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvXO1Bf:rRkiLw3HsDSARGG/WBf

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      NEAS.58129d574276d13cf0744a87d51ee28a.exe

    • Size

      19KB

    • MD5

      58129d574276d13cf0744a87d51ee28a

    • SHA1

      d6ea309607c33a4b064700a4f8b521e5abca5642

    • SHA256

      6f363e914c2b4f121513e2dc9988001d09ce014c20a307e86d8fd039acf23c5a

    • SHA512

      2bfb0d2d3d3ece406c51b83f443f2554679c308463ce934eaa714e9f933f542c31960e205c34df80918af088e077935b62bb006c4b3f05e4ea5d34e7870080aa

    • SSDEEP

      384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvXO1Bf:rRkiLw3HsDSARGG/WBf

    Score
    10/10
    evasionpersistencetrojanupx

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks