Overview

overview

10

Static

static

3

NEAS.c40a6...b0.exe

windows7-x64

10

NEAS.c40a6...b0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.c40a6cb9fa8c5873ad2c0e7fc31006b0.exe

  • Size

    148KB

  • Sample

    231013-ze5dnafe8v

  • MD5

    c40a6cb9fa8c5873ad2c0e7fc31006b0

  • SHA1

    a54f41536c2f6efb947edf29c61e8f367ffc4135

  • SHA256

    9d8647616b7a37dfcb8682f7d07b3ae9c2b0b4bc049294b38fc7862f0dd40f95

  • SHA512

    2f103c710fe6a228b7e8f088d21f943256a5671b485ebc537602d0c647252d44f6a5b03da993d4e6d3b9ff74c3ebc6e516275e65ccd90b61d999bfbbb3d58ae4

  • SSDEEP

    1536:n4iA4UFVV+NVeTHNqIWKtIhXayH3l2TKjpX4iImVYpVcOB3IWVPdq:4eyVVKVe7NqDlhXaygCpXamVwcOdfTq

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      NEAS.c40a6cb9fa8c5873ad2c0e7fc31006b0.exe

    • Size

      148KB

    • MD5

      c40a6cb9fa8c5873ad2c0e7fc31006b0

    • SHA1

      a54f41536c2f6efb947edf29c61e8f367ffc4135

    • SHA256

      9d8647616b7a37dfcb8682f7d07b3ae9c2b0b4bc049294b38fc7862f0dd40f95

    • SHA512

      2f103c710fe6a228b7e8f088d21f943256a5671b485ebc537602d0c647252d44f6a5b03da993d4e6d3b9ff74c3ebc6e516275e65ccd90b61d999bfbbb3d58ae4

    • SSDEEP

      1536:n4iA4UFVV+NVeTHNqIWKtIhXayH3l2TKjpX4iImVYpVcOB3IWVPdq:4eyVVKVe7NqDlhXaygCpXamVwcOdfTq

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks