Overview

overview

9

Static

static

3

NEAS.0b487...JC.exe

windows7-x64

9

NEAS.0b487...JC.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.0b487e3a036de4f3f84986ea3035e2f0_JC.exe

  • Size

    193KB

  • Sample

    231013-v2nl7sed88

  • MD5

    0b487e3a036de4f3f84986ea3035e2f0

  • SHA1

    6b0ec4b54a2c9d8e02872ef9d8eb8110283b552e

  • SHA256

    028efedeab3a9c746ee580dda54ef9867aa288a8d9f3ec063e06933cb2b2ee56

  • SHA512

    1d277cbbb73184c49f2b4b766e8614758e0f3d6af111114977625d74ebf0df52f252cf388c6dd27c515cc7f1ca38b7e49efcf87e0a9c385501c43206a953eb06

  • SSDEEP

    3072:6e7WpMNca3rytOkWpXfnYRl2l/9HSFHzJ0UwUhQ7XhxS:RqKB+tOkWKR0iJ0Ux

Score
9/10
ransomware

Malware Config

Targets

    • Target

      NEAS.0b487e3a036de4f3f84986ea3035e2f0_JC.exe

    • Size

      193KB

    • MD5

      0b487e3a036de4f3f84986ea3035e2f0

    • SHA1

      6b0ec4b54a2c9d8e02872ef9d8eb8110283b552e

    • SHA256

      028efedeab3a9c746ee580dda54ef9867aa288a8d9f3ec063e06933cb2b2ee56

    • SHA512

      1d277cbbb73184c49f2b4b766e8614758e0f3d6af111114977625d74ebf0df52f252cf388c6dd27c515cc7f1ca38b7e49efcf87e0a9c385501c43206a953eb06

    • SSDEEP

      3072:6e7WpMNca3rytOkWpXfnYRl2l/9HSFHzJ0UwUhQ7XhxS:RqKB+tOkWKR0iJ0Ux

    Score
    9/10
    ransomware

    • Renames multiple (286) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks