Overview

overview

7

Static

static

3

NEAS.db3e3...70.exe

windows7-x64

7

NEAS.db3e3...70.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.db3e3a17124be939b273a32481d5b670.exe

  • Size

    55KB

  • Sample

    231013-zjmz6sbe44

  • MD5

    db3e3a17124be939b273a32481d5b670

  • SHA1

    5e37349a799a49a436f22b1385b2669f31850778

  • SHA256

    8f1ea5eaac2f38491a40dc6356361952f9aa3346f498730de90be3ab9d6beec5

  • SHA512

    4c90d7a6b154ce23f648464416128ca5d1892d221010808566f467f6bedc54ddbe7653a2a79c9d769430eee84e3f9b3afd6a8ce4dec4243545f36e95ad4c8001

  • SSDEEP

    1536:MncPoTPcYDN3b7h5/l9yq6Gqtm5NCYyi40n:McPsceNruqtz

Score
7/10

Malware Config

Targets

    • Target

      NEAS.db3e3a17124be939b273a32481d5b670.exe

    • Size

      55KB

    • MD5

      db3e3a17124be939b273a32481d5b670

    • SHA1

      5e37349a799a49a436f22b1385b2669f31850778

    • SHA256

      8f1ea5eaac2f38491a40dc6356361952f9aa3346f498730de90be3ab9d6beec5

    • SHA512

      4c90d7a6b154ce23f648464416128ca5d1892d221010808566f467f6bedc54ddbe7653a2a79c9d769430eee84e3f9b3afd6a8ce4dec4243545f36e95ad4c8001

    • SSDEEP

      1536:MncPoTPcYDN3b7h5/l9yq6Gqtm5NCYyi40n:McPsceNruqtz

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks