Overview

overview

10

Static

static

3

NEAS.bf43e...JC.exe

windows7-x64

10

NEAS.bf43e...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.bf43e598eb5a6bff29094e4c866871bcexe_JC.exe

  • Size

    136KB

  • Sample

    231006-qer9nabg6z

  • MD5

    bf43e598eb5a6bff29094e4c866871bc

  • SHA1

    28264076d69c714263bb2220b0513adfd43da2a3

  • SHA256

    072d65bbdbd16e5fcbc179c2a39ef1697e775bdc8395f762308aa895e67c7caf

  • SHA512

    0870288c7cd923f4e7ddc35f8bebf7c7efaac6584963f35ef3d172403d83edce0b9f10b4efed83b69fe5719d7bb4e6666819f4fdb8cc6c7d57cb7d6b8690fbed

  • SSDEEP

    3072:oat41orSbvlqhdzENk8QYxQdLrCimBaH8UH30ZIvM6qMH5X3O/gU:f4vbUhhENFtCApaH8m3QIvMWH5H3U

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.bf43e598eb5a6bff29094e4c866871bcexe_JC.exe

    • Size

      136KB

    • MD5

      bf43e598eb5a6bff29094e4c866871bc

    • SHA1

      28264076d69c714263bb2220b0513adfd43da2a3

    • SHA256

      072d65bbdbd16e5fcbc179c2a39ef1697e775bdc8395f762308aa895e67c7caf

    • SHA512

      0870288c7cd923f4e7ddc35f8bebf7c7efaac6584963f35ef3d172403d83edce0b9f10b4efed83b69fe5719d7bb4e6666819f4fdb8cc6c7d57cb7d6b8690fbed

    • SSDEEP

      3072:oat41orSbvlqhdzENk8QYxQdLrCimBaH8UH30ZIvM6qMH5X3O/gU:f4vbUhhENFtCApaH8m3QIvMWH5H3U

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks