Overview

overview

10

Static

static

3

NEAS.81767...JC.exe

windows7-x64

10

NEAS.81767...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.817671c243db6a0476d13f91e7a64af0_JC.exe

  • Size

    176KB

  • Sample

    231009-t3tdeagf37

  • MD5

    817671c243db6a0476d13f91e7a64af0

  • SHA1

    3b1f3cf6b41c1916a1b1eeb45bf8f1c8c0a7685b

  • SHA256

    b6fc8b2b4e0cb9bc4a23a381510f655c3717ac6a1d129f4dd9bae8e3f76922d7

  • SHA512

    756c8798212cebb4c11fd1757b0fc7c125d6e896a2cf7ea558475eeea5c762e2556ef6d2083c68b5b4a01f5c9e31d65867326487ce77000f9868739780f5f5ff

  • SSDEEP

    1536:65ccbljiFsHasXSAIYGXpn2uM6whkJuJSI5pOTz7uDGTmK7AZp0XNuTzsqgopWK6:sBjCSbGXp2FhkDIKT2qS50XNYzmw+YpG

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      NEAS.817671c243db6a0476d13f91e7a64af0_JC.exe

    • Size

      176KB

    • MD5

      817671c243db6a0476d13f91e7a64af0

    • SHA1

      3b1f3cf6b41c1916a1b1eeb45bf8f1c8c0a7685b

    • SHA256

      b6fc8b2b4e0cb9bc4a23a381510f655c3717ac6a1d129f4dd9bae8e3f76922d7

    • SHA512

      756c8798212cebb4c11fd1757b0fc7c125d6e896a2cf7ea558475eeea5c762e2556ef6d2083c68b5b4a01f5c9e31d65867326487ce77000f9868739780f5f5ff

    • SSDEEP

      1536:65ccbljiFsHasXSAIYGXpn2uM6whkJuJSI5pOTz7uDGTmK7AZp0XNuTzsqgopWK6:sBjCSbGXp2FhkDIKT2qS50XNYzmw+YpG

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables cmd.exe use via registry modification

      evasion

    • Drops file in Drivers directory

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks