Overview

overview

10

Static

static

3

NEAS.fd6b8...d0.exe

windows7-x64

10

NEAS.fd6b8...d0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.fd6b862f14abfc1ce6aa948b6ff10ed0.exe

  • Size

    125KB

  • Sample

    231014-katzssba5v

  • MD5

    fd6b862f14abfc1ce6aa948b6ff10ed0

  • SHA1

    b7768a1768aaf99bcdb255a60113293498963d40

  • SHA256

    4e570d92d3ebc6bcba2b5a6644623f4f8fe2ce00a33dcf17d320d3b19aef9d62

  • SHA512

    9905e4877d69052ee1d4aef0e5a25c794726a75cdc42851d0779639aee4bba454bf43ea388fef9bd70907b79b0b0fdd34de40771bd1c3d050034450d3f70d4d9

  • SSDEEP

    3072:SUKYIGU1Qscusj8cq1WdTCn93OGey/ZhJakrPF:SUKYRsDs8c5TCndOGeKTaG

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.fd6b862f14abfc1ce6aa948b6ff10ed0.exe

    • Size

      125KB

    • MD5

      fd6b862f14abfc1ce6aa948b6ff10ed0

    • SHA1

      b7768a1768aaf99bcdb255a60113293498963d40

    • SHA256

      4e570d92d3ebc6bcba2b5a6644623f4f8fe2ce00a33dcf17d320d3b19aef9d62

    • SHA512

      9905e4877d69052ee1d4aef0e5a25c794726a75cdc42851d0779639aee4bba454bf43ea388fef9bd70907b79b0b0fdd34de40771bd1c3d050034450d3f70d4d9

    • SSDEEP

      3072:SUKYIGU1Qscusj8cq1WdTCn93OGey/ZhJakrPF:SUKYRsDs8c5TCndOGeKTaG

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks