Overview

overview

10

Static

static

3

NEAS.5e91d...f0.exe

windows7-x64

10

NEAS.5e91d...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.5e91dc05906052e2e3deca6755516bf0.exe

  • Size

    244KB

  • Sample

    231013-y7bflsaa4t

  • MD5

    5e91dc05906052e2e3deca6755516bf0

  • SHA1

    f8c519121ad2435b68574ec7bdee005661aab0b7

  • SHA256

    188c8f20788556a5075a892391d7b9f5c77a7b42adc65c0cb661f0e7d1230672

  • SHA512

    813abaa91412b5b4a78a8100c8f9915b2ba4d7db7959538967cdf2b0b559328b6bda81f1e89601c658457cbbe4a6df516d849ec450cb39b7758b6122a2a9b768

  • SSDEEP

    768:1lvMaTCJU7wbjMPkG1VuW/wqvRXMXp677yCzdXZRT2Nq1MaQnepMri14PGBEj6Cj:1RleJUElGVs4emEFb8P0

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      NEAS.5e91dc05906052e2e3deca6755516bf0.exe

    • Size

      244KB

    • MD5

      5e91dc05906052e2e3deca6755516bf0

    • SHA1

      f8c519121ad2435b68574ec7bdee005661aab0b7

    • SHA256

      188c8f20788556a5075a892391d7b9f5c77a7b42adc65c0cb661f0e7d1230672

    • SHA512

      813abaa91412b5b4a78a8100c8f9915b2ba4d7db7959538967cdf2b0b559328b6bda81f1e89601c658457cbbe4a6df516d849ec450cb39b7758b6122a2a9b768

    • SSDEEP

      768:1lvMaTCJU7wbjMPkG1VuW/wqvRXMXp677yCzdXZRT2Nq1MaQnepMri14PGBEj6Cj:1RleJUElGVs4emEFb8P0

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks