Overview

overview

8

Static

static

3

NEAS.60e90...10.exe

windows7-x64

8

NEAS.60e90...10.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.60e902ea036ea4101f7bf7c6a8296210.exe

  • Size

    127KB

  • Sample

    231014-wjfdjsch52

  • MD5

    60e902ea036ea4101f7bf7c6a8296210

  • SHA1

    68c6f5575d01abb4d9186c1335e1b0290376f402

  • SHA256

    07e1b6a1a11928cfa3fab6f16c1ecf28556517930afd760e745aee6facb22da0

  • SHA512

    5680c90835c235558ecc453c46dd1858cfe7e402037cfdc0acce8912ff4501652ceebb8cc0f95020fa7b09572483cafb1192cfbc0a121e958df8456f0983bd37

  • SSDEEP

    1536:l6u6YB56XJ6owvzbNfURp4VntUhtH7Vi4BhRMq+xN:l6uB28owvlrVnihVVi4HaN

Score
8/10
persistence

Malware Config

Targets

    • Target

      NEAS.60e902ea036ea4101f7bf7c6a8296210.exe

    • Size

      127KB

    • MD5

      60e902ea036ea4101f7bf7c6a8296210

    • SHA1

      68c6f5575d01abb4d9186c1335e1b0290376f402

    • SHA256

      07e1b6a1a11928cfa3fab6f16c1ecf28556517930afd760e745aee6facb22da0

    • SHA512

      5680c90835c235558ecc453c46dd1858cfe7e402037cfdc0acce8912ff4501652ceebb8cc0f95020fa7b09572483cafb1192cfbc0a121e958df8456f0983bd37

    • SSDEEP

      1536:l6u6YB56XJ6owvzbNfURp4VntUhtH7Vi4BhRMq+xN:l6uB28owvlrVnihVVi4HaN

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks