Overview

overview

10

Static

static

7

NEAS.c67b6...90.exe

windows7-x64

10

NEAS.c67b6...90.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.c67b6a991845c13b05e48ca69eca1c90.exe

  • Size

    76KB

  • Sample

    231013-zfdbkahg69

  • MD5

    c67b6a991845c13b05e48ca69eca1c90

  • SHA1

    77bf478eebc390a49afc7a30a8d0d823a4dec846

  • SHA256

    ae1956d3ef5c233ed9f4b404cb2bdf2dea3ad0526cc704874bd4bfb9147e606b

  • SHA512

    e79b271655b4a7ac7d3f1b60add4de8e24a87afff0e4e7a5dc353281771182a4fa2a9dfdc470adfd538eaff52dfb4f6723252d57cca75cd1e5a9fdbb698215eb

  • SSDEEP

    768:q0hdevvOHpOWNBuqMYjwxZY82It/u+bGF1DS73g+m5xqhGYS5fPT:q0hHpmhYmFk1Q3K5yGL7

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      NEAS.c67b6a991845c13b05e48ca69eca1c90.exe

    • Size

      76KB

    • MD5

      c67b6a991845c13b05e48ca69eca1c90

    • SHA1

      77bf478eebc390a49afc7a30a8d0d823a4dec846

    • SHA256

      ae1956d3ef5c233ed9f4b404cb2bdf2dea3ad0526cc704874bd4bfb9147e606b

    • SHA512

      e79b271655b4a7ac7d3f1b60add4de8e24a87afff0e4e7a5dc353281771182a4fa2a9dfdc470adfd538eaff52dfb4f6723252d57cca75cd1e5a9fdbb698215eb

    • SSDEEP

      768:q0hdevvOHpOWNBuqMYjwxZY82It/u+bGF1DS73g+m5xqhGYS5fPT:q0hHpmhYmFk1Q3K5yGL7

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks