Overview

overview

10

Static

static

3

NEAS.d84aa...60.exe

windows7-x64

10

NEAS.d84aa...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d84aaf9acd8c9e82ebd52e74d7cb7a60.exe

  • Size

    109KB

  • Sample

    231013-zjcjfabc86

  • MD5

    d84aaf9acd8c9e82ebd52e74d7cb7a60

  • SHA1

    02c181078d70300f7b6d087bc98709911f12ecde

  • SHA256

    9248b8d8ee29395c33c7c095669a1e7ff570059ca269fe430c0808f4fddae521

  • SHA512

    0c5b25daf022eae56ceb759b51c288c93d81fd78687170cee41d4032e2f205b3187313ac630f97a9b88c89f82f6d696c4c625614d42820346c11c315b604a1d0

  • SSDEEP

    3072:RsMRakk6ViPJViPkf2/C3iOJ9aLCqwzBu1DjHLMVDqqkSpR:340iniT/hOJ9uwtu1DjrFqhz

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.d84aaf9acd8c9e82ebd52e74d7cb7a60.exe

    • Size

      109KB

    • MD5

      d84aaf9acd8c9e82ebd52e74d7cb7a60

    • SHA1

      02c181078d70300f7b6d087bc98709911f12ecde

    • SHA256

      9248b8d8ee29395c33c7c095669a1e7ff570059ca269fe430c0808f4fddae521

    • SHA512

      0c5b25daf022eae56ceb759b51c288c93d81fd78687170cee41d4032e2f205b3187313ac630f97a9b88c89f82f6d696c4c625614d42820346c11c315b604a1d0

    • SSDEEP

      3072:RsMRakk6ViPJViPkf2/C3iOJ9aLCqwzBu1DjHLMVDqqkSpR:340iniT/hOJ9uwtu1DjrFqhz

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks