Overview

overview

10

Static

static

3

NEAS.d1976...d0.exe

windows7-x64

10

NEAS.d1976...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d1976932d4b0b006ba9e89ccf9de0ed0.exe

  • Size

    206KB

  • Sample

    231013-zhmm1sgh2v

  • MD5

    d1976932d4b0b006ba9e89ccf9de0ed0

  • SHA1

    f87183c597a017076f9215d03a6ee68aa7539b4e

  • SHA256

    342a4030fe6fa8f8d64c2de0a25f4162e241802a283475d1c6758dcb3eede82d

  • SHA512

    68656f747ebee2aaa9d6b98fcf34ca8633f08291c4a7d65664b9db41232aaf879bc440a5d054cca95de3f1baea13b3a3ca295c10ff44401167ad3a86b23e27e2

  • SSDEEP

    3072:NvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unFAU:NvEN2U+T6i5LirrllHy4HUcMQY6NU

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      NEAS.d1976932d4b0b006ba9e89ccf9de0ed0.exe

    • Size

      206KB

    • MD5

      d1976932d4b0b006ba9e89ccf9de0ed0

    • SHA1

      f87183c597a017076f9215d03a6ee68aa7539b4e

    • SHA256

      342a4030fe6fa8f8d64c2de0a25f4162e241802a283475d1c6758dcb3eede82d

    • SHA512

      68656f747ebee2aaa9d6b98fcf34ca8633f08291c4a7d65664b9db41232aaf879bc440a5d054cca95de3f1baea13b3a3ca295c10ff44401167ad3a86b23e27e2

    • SSDEEP

      3072:NvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unFAU:NvEN2U+T6i5LirrllHy4HUcMQY6NU

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks