Overview

overview

10

Static

static

3

NEAS.e3979...20.exe

windows7-x64

10

NEAS.e3979...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e39791a8f27d43edf126d0ea6d17ae20.exe

  • Size

    415KB

  • Sample

    231014-x84ccabh57

  • MD5

    e39791a8f27d43edf126d0ea6d17ae20

  • SHA1

    0f70eeb100ed9380119bb02e4ca74b2de6717614

  • SHA256

    d6117b55a4019cc80701d536274636b7ffce596661f064008af847343576a69d

  • SHA512

    591382529cf691cc4af684ffaaf7311817141e621f7f2e94cc636800b58bb4c6b937675323c30c90ea23b007178a2675ea389aead83d43d5cd2de17e3dd5c9cd

  • SSDEEP

    12288:JQooWj7NtInBBBBBBBBBBBBBBBBBBBBBBBBB0kfBBBBBBBBBBBBBBBBBBBBBBBBL:bklp

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.e39791a8f27d43edf126d0ea6d17ae20.exe

    • Size

      415KB

    • MD5

      e39791a8f27d43edf126d0ea6d17ae20

    • SHA1

      0f70eeb100ed9380119bb02e4ca74b2de6717614

    • SHA256

      d6117b55a4019cc80701d536274636b7ffce596661f064008af847343576a69d

    • SHA512

      591382529cf691cc4af684ffaaf7311817141e621f7f2e94cc636800b58bb4c6b937675323c30c90ea23b007178a2675ea389aead83d43d5cd2de17e3dd5c9cd

    • SSDEEP

      12288:JQooWj7NtInBBBBBBBBBBBBBBBBBBBBBBBBB0kfBBBBBBBBBBBBBBBBBBBBBBBBL:bklp

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks