Overview

overview

7

Static

static

3

NEAS.104c0...JC.exe

windows7-x64

7

NEAS.104c0...JC.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.104c0fb515be31254143c4438a345480_JC.exe

  • Size

    369KB

  • Sample

    231014-ptqhyaga53

  • MD5

    104c0fb515be31254143c4438a345480

  • SHA1

    d6ce45d4825902ed2a0fe44686a6bbe81eee34bb

  • SHA256

    27c20612812b2432d2ddee4213c2628df187a30ded0174d46a7d52e8b1bcd01c

  • SHA512

    29843193dbb2e1cdcd0100f8b6746428974fb1037c5788c7c8c2e9c845142a6e0fb92b6f009bb8df9770e717c875db751637c7a9d960b5353db1446d3b542fb0

  • SSDEEP

    6144:7Drk+NRNlgPQsVeqBXkW1Xl47Ns7Bn6Wn4YFCpDU94mc9PH:7sClg/fXx1Xl4AB6WnzCC94v

Score
7/10
persistence

Malware Config

Targets

    • Target

      NEAS.104c0fb515be31254143c4438a345480_JC.exe

    • Size

      369KB

    • MD5

      104c0fb515be31254143c4438a345480

    • SHA1

      d6ce45d4825902ed2a0fe44686a6bbe81eee34bb

    • SHA256

      27c20612812b2432d2ddee4213c2628df187a30ded0174d46a7d52e8b1bcd01c

    • SHA512

      29843193dbb2e1cdcd0100f8b6746428974fb1037c5788c7c8c2e9c845142a6e0fb92b6f009bb8df9770e717c875db751637c7a9d960b5353db1446d3b542fb0

    • SSDEEP

      6144:7Drk+NRNlgPQsVeqBXkW1Xl47Ns7Bn6Wn4YFCpDU94mc9PH:7sClg/fXx1Xl4AB6WnzCC94v

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks