Overview

overview

10

Static

static

3

NEAS.1efd9...JC.exe

windows7-x64

10

NEAS.1efd9...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.1efd903a36037655ef8844dada95ddb0_JC.exe

  • Size

    96KB

  • Sample

    231014-rtwfashc68

  • MD5

    1efd903a36037655ef8844dada95ddb0

  • SHA1

    834752480b5133106eb3b0e06c88b409acd619a2

  • SHA256

    b2cee0b9a1d4fe60648bb68934815ad452b6e414984ef0457eb3059ac5e2c1c8

  • SHA512

    dbc4a35472437851ceb0948382bfa3716fc4c97a7c4c8bfedbcb8c4cb411026062285ce9244ef3f298e85053c0d878f32a9b08a621985c90a1a767eab05d9e44

  • SSDEEP

    1536:TEz9RSyRrlHKhh5qsnH/cUy6oPccSaH68fS07qKlE0/BOmJCMy0QiLiizHNQNdq:Y9RSyRxHghgabyxcUH6u7qKlE05OmJCe

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.1efd903a36037655ef8844dada95ddb0_JC.exe

    • Size

      96KB

    • MD5

      1efd903a36037655ef8844dada95ddb0

    • SHA1

      834752480b5133106eb3b0e06c88b409acd619a2

    • SHA256

      b2cee0b9a1d4fe60648bb68934815ad452b6e414984ef0457eb3059ac5e2c1c8

    • SHA512

      dbc4a35472437851ceb0948382bfa3716fc4c97a7c4c8bfedbcb8c4cb411026062285ce9244ef3f298e85053c0d878f32a9b08a621985c90a1a767eab05d9e44

    • SSDEEP

      1536:TEz9RSyRrlHKhh5qsnH/cUy6oPccSaH68fS07qKlE0/BOmJCMy0QiLiizHNQNdq:Y9RSyRxHghgabyxcUH6u7qKlE05OmJCe

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks