Overview

overview

9

Static

static

3

NEAS.f1bbf...50.exe

windows7-x64

9

NEAS.f1bbf...50.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.f1bbfb1244664890886c4856cf8f1a50.exe

  • Size

    194KB

  • Sample

    231014-j9sqcaac6s

  • MD5

    f1bbfb1244664890886c4856cf8f1a50

  • SHA1

    75629c39a63ade301f7280e0c911bc4e3276885e

  • SHA256

    5e31001ae72f205d6e529f3f4d0347867176b1ef500307aa0a9ec5977502bee4

  • SHA512

    e7ba58a9107686903e2b6b5fbb9ba5b775f7bf7a4c5c3123fe34643cc9022f3aab9741e02aefea09a41c1d12135c475b0827013b2c5f8f6ae4f2bbb3d991dc4f

  • SSDEEP

    3072:6e7WpmSWfE9tHpKrvGCLOwstyhZFChcssc56FUrgxvbSD4UQrO2Ex1:RqgSWc95pK7ShcHUaq

Score
9/10
ransomware

Malware Config

Targets

    • Target

      NEAS.f1bbfb1244664890886c4856cf8f1a50.exe

    • Size

      194KB

    • MD5

      f1bbfb1244664890886c4856cf8f1a50

    • SHA1

      75629c39a63ade301f7280e0c911bc4e3276885e

    • SHA256

      5e31001ae72f205d6e529f3f4d0347867176b1ef500307aa0a9ec5977502bee4

    • SHA512

      e7ba58a9107686903e2b6b5fbb9ba5b775f7bf7a4c5c3123fe34643cc9022f3aab9741e02aefea09a41c1d12135c475b0827013b2c5f8f6ae4f2bbb3d991dc4f

    • SSDEEP

      3072:6e7WpmSWfE9tHpKrvGCLOwstyhZFChcssc56FUrgxvbSD4UQrO2Ex1:RqgSWc95pK7ShcHUaq

    Score
    9/10
    ransomware

    • Renames multiple (229) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks