Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

NEAS.15ec5...40.exe

windows7-x64

10

NEAS.15ec5...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.15ec575d4f76e38a288ef0a81a5d8d40.exe

  • Size

    98KB

  • Sample

    231117-y6zrtadg24

  • MD5

    15ec575d4f76e38a288ef0a81a5d8d40

  • SHA1

    8b1ad12f39eba450bcd2a89681bc7a3a14c19003

  • SHA256

    b0d5b7a2ba090a17e3f0c2d1f0efa4956b640622c2958949cd0af803e68aab73

  • SHA512

    37f5a77052e8f911d8e88a1c6010511a47074be84efc8c06edd8e30dcd73d33e777674e458367f48dfd8a484efb6b928ee1e4411661f8c0fd762cbcad7c42f07

  • SSDEEP

    3072:Ckf8Ga02ITUS0gCVbm+V+NEWESeFKPD375lHzpa1P:Ckf8Ga0jddC0FESeYr75lHzpaF

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.15ec575d4f76e38a288ef0a81a5d8d40.exe

    • Size

      98KB

    • MD5

      15ec575d4f76e38a288ef0a81a5d8d40

    • SHA1

      8b1ad12f39eba450bcd2a89681bc7a3a14c19003

    • SHA256

      b0d5b7a2ba090a17e3f0c2d1f0efa4956b640622c2958949cd0af803e68aab73

    • SHA512

      37f5a77052e8f911d8e88a1c6010511a47074be84efc8c06edd8e30dcd73d33e777674e458367f48dfd8a484efb6b928ee1e4411661f8c0fd762cbcad7c42f07

    • SSDEEP

      3072:Ckf8Ga02ITUS0gCVbm+V+NEWESeFKPD375lHzpa1P:Ckf8Ga0jddC0FESeYr75lHzpaF

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks