Overview

overview

10

Static

static

3

NEAS.dcf43...JC.exe

windows7-x64

10

NEAS.dcf43...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.dcf430f93bee0d9c999ed8ec5ef00f35_JC.exe

  • Size

    300KB

  • Sample

    231009-vm262seh2v

  • MD5

    dcf430f93bee0d9c999ed8ec5ef00f35

  • SHA1

    5a34861422cbd402d8f027931cdca385621d296c

  • SHA256

    f6ed3b9f6de9491f6d8421773ca77b9f492d8be89a2bb83f456f6e7a3fd28d38

  • SHA512

    2599e0948fb52f5660929eea535e70cbc3f9d58e1a416017416dd32b23610fa95166dba1ed7ac2135401cc72a9c082ee1c1663b6d9b391d8fbdd50d90d4df6ec

  • SSDEEP

    6144:bKnYcD2jvosK6mUzW0jAWRD2jvosK6mUzWJEmQ/xvAORykVbn9X6:mx67fLx67+dQ/XR5bn0

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.dcf430f93bee0d9c999ed8ec5ef00f35_JC.exe

    • Size

      300KB

    • MD5

      dcf430f93bee0d9c999ed8ec5ef00f35

    • SHA1

      5a34861422cbd402d8f027931cdca385621d296c

    • SHA256

      f6ed3b9f6de9491f6d8421773ca77b9f492d8be89a2bb83f456f6e7a3fd28d38

    • SHA512

      2599e0948fb52f5660929eea535e70cbc3f9d58e1a416017416dd32b23610fa95166dba1ed7ac2135401cc72a9c082ee1c1663b6d9b391d8fbdd50d90d4df6ec

    • SSDEEP

      6144:bKnYcD2jvosK6mUzW0jAWRD2jvosK6mUzWJEmQ/xvAORykVbn9X6:mx67fLx67+dQ/XR5bn0

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks