Overview

overview

10

Static

static

3

NEAS.87bef...JC.exe

windows7-x64

10

NEAS.87bef...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.87bef68b5f9ad3fb2b3dfb2dc1022a90_JC.exe

  • Size

    228KB

  • Sample

    231010-x38d4sgb9w

  • MD5

    87bef68b5f9ad3fb2b3dfb2dc1022a90

  • SHA1

    dff9e4ea5aa75b3f362cdf11694bc350045bbfb7

  • SHA256

    719c5e42e26eadfd6742bc61df93a57e3deb44fa673611320bce70b9db67d098

  • SHA512

    9aaa8f50528300c3d2365c58b20bdf9e365df585f8960ef30836853134ab70ab3314409d9f06d2ea8b277c31c08d7185b9103f869c7764b88b27daf1760b1766

  • SSDEEP

    6144:xqrl5PECtrkQ5zgMZUP15HcAgonAmKfwDVAQOqSH:kl1gMZUHcAgonAmZDVEN

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      NEAS.87bef68b5f9ad3fb2b3dfb2dc1022a90_JC.exe

    • Size

      228KB

    • MD5

      87bef68b5f9ad3fb2b3dfb2dc1022a90

    • SHA1

      dff9e4ea5aa75b3f362cdf11694bc350045bbfb7

    • SHA256

      719c5e42e26eadfd6742bc61df93a57e3deb44fa673611320bce70b9db67d098

    • SHA512

      9aaa8f50528300c3d2365c58b20bdf9e365df585f8960ef30836853134ab70ab3314409d9f06d2ea8b277c31c08d7185b9103f869c7764b88b27daf1760b1766

    • SSDEEP

      6144:xqrl5PECtrkQ5zgMZUP15HcAgonAmKfwDVAQOqSH:kl1gMZUHcAgonAmZDVEN

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks