Overview

overview

10

Static

static

3

NEAS.5c574...40.exe

windows7-x64

10

NEAS.5c574...40.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.5c57484fab4531ffb74c4fd6d0cf6a40.exe

  • Size

    204KB

  • Sample

    231014-wh58ksah51

  • MD5

    5c57484fab4531ffb74c4fd6d0cf6a40

  • SHA1

    2a7bcc104f78ee5f75d8494b60d95608c62eec57

  • SHA256

    76fe86f2f70bfc7ba7cfd2fc1916db3a94696bbfbcad862b5de870bfdf27efea

  • SHA512

    5a75dbfedf15f63bc8811cbb86461d3a0a29ba9ee692a154736037ee4747a7b32982b3911935b11e9fb17e25b90d01d09b8501a17e9f835a763248b7eb340865

  • SSDEEP

    3072:kmAW8Eut0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUW//:/VbQ4QxL7B9W0c1RCzR/fSmlm

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      NEAS.5c57484fab4531ffb74c4fd6d0cf6a40.exe

    • Size

      204KB

    • MD5

      5c57484fab4531ffb74c4fd6d0cf6a40

    • SHA1

      2a7bcc104f78ee5f75d8494b60d95608c62eec57

    • SHA256

      76fe86f2f70bfc7ba7cfd2fc1916db3a94696bbfbcad862b5de870bfdf27efea

    • SHA512

      5a75dbfedf15f63bc8811cbb86461d3a0a29ba9ee692a154736037ee4747a7b32982b3911935b11e9fb17e25b90d01d09b8501a17e9f835a763248b7eb340865

    • SSDEEP

      3072:kmAW8Eut0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUW//:/VbQ4QxL7B9W0c1RCzR/fSmlm

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks