Overview

overview

7

Static

static

3

NEAS.67db1...20.exe

windows7-x64

7

NEAS.67db1...20.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.67db1304dcb9feb7b9935006194ee920.exe

  • Size

    84KB

  • Sample

    231013-y72ykace57

  • MD5

    67db1304dcb9feb7b9935006194ee920

  • SHA1

    fd8d02a1cfa8ae06e28d19450392077aa046fcb5

  • SHA256

    38d173e0112300a368edf1cb8589e0a83037e8e7f2f8e895e22cc4c1cc0c8146

  • SHA512

    c09840838a2ee314cca006538a7d41d5e78ed72f2488c5948a099ee4d4dbea98729c0dd5e582a988f30ce301523b360982a9c51008b5e4ddee040a636589ca02

  • SSDEEP

    1536:0MybiksPWaKVqY3k8qD3uFbzzO8C4Y9c+sJUZy/K/4:ty+3WaKVGD3uFHC8C4jWS

Score
7/10

Malware Config

Targets

    • Target

      NEAS.67db1304dcb9feb7b9935006194ee920.exe

    • Size

      84KB

    • MD5

      67db1304dcb9feb7b9935006194ee920

    • SHA1

      fd8d02a1cfa8ae06e28d19450392077aa046fcb5

    • SHA256

      38d173e0112300a368edf1cb8589e0a83037e8e7f2f8e895e22cc4c1cc0c8146

    • SHA512

      c09840838a2ee314cca006538a7d41d5e78ed72f2488c5948a099ee4d4dbea98729c0dd5e582a988f30ce301523b360982a9c51008b5e4ddee040a636589ca02

    • SSDEEP

      1536:0MybiksPWaKVqY3k8qD3uFbzzO8C4Y9c+sJUZy/K/4:ty+3WaKVGD3uFHC8C4jWS

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks