Overview

overview

9

Static

static

3

NEAS.08203...JC.exe

windows7-x64

9

NEAS.08203...JC.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.08203596eb717cc5192e21be3607a8d0_JC.exe

  • Size

    230KB

  • Sample

    231012-t2h62sdg72

  • MD5

    08203596eb717cc5192e21be3607a8d0

  • SHA1

    430bcfe64e4cd9a2bf0c233b5477ae42cb4742e6

  • SHA256

    32c9178122e98b301fbe1ff786c2b75c4563ade77d0a2838b09c50cf9cedef30

  • SHA512

    75c087543b0df9ae4ac87cbf37b4aa503e4a3a871529dbd8b80a2b279a78b2880c253a5685b23d6a778bfe2e554f6151bf5bfd164f6fa4e718bb0c60061d8188

  • SSDEEP

    3072:6e7WpHIyRF9ESWu0SWuDmSXrwcyK9j+9jfrKe7WpHIyRF9ESWu0SWuDmSXrwcyKb:RqlIyFESWu0SWuWqlIyFESWu0SWu3

Score
9/10
ransomware

Malware Config

Targets

    • Target

      NEAS.08203596eb717cc5192e21be3607a8d0_JC.exe

    • Size

      230KB

    • MD5

      08203596eb717cc5192e21be3607a8d0

    • SHA1

      430bcfe64e4cd9a2bf0c233b5477ae42cb4742e6

    • SHA256

      32c9178122e98b301fbe1ff786c2b75c4563ade77d0a2838b09c50cf9cedef30

    • SHA512

      75c087543b0df9ae4ac87cbf37b4aa503e4a3a871529dbd8b80a2b279a78b2880c253a5685b23d6a778bfe2e554f6151bf5bfd164f6fa4e718bb0c60061d8188

    • SSDEEP

      3072:6e7WpHIyRF9ESWu0SWuDmSXrwcyK9j+9jfrKe7WpHIyRF9ESWu0SWuDmSXrwcyKb:RqlIyFESWu0SWuWqlIyFESWu0SWu3

    Score
    9/10
    ransomware

    • Renames multiple (1723) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Renames multiple (348) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks