Overview

overview

10

Static

static

3

NEAS.bfa60...b0.exe

windows7-x64

10

NEAS.bfa60...b0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.bfa6003163dff3fbb2a9903809f372b0.exe

  • Size

    96KB

  • Sample

    231014-xv9bfahf22

  • MD5

    bfa6003163dff3fbb2a9903809f372b0

  • SHA1

    1a5901981c927f113e25de42e0921750922c8bde

  • SHA256

    10ddcc19a8e899ec5d7dc5e8033804c37646ccccf65c6db59a95dc2996e03792

  • SHA512

    ef16f08d1711c3eb142fd82f010603abaeb4d360ce383de5be96e8ee2f6533604e421a907ec211e11f2e849151cd3760c00c9539ebd69d68b406763e19dcf384

  • SSDEEP

    1536:TTePQZvx1Pz6URisvapMAPgnDNBrcN4i6tBYuR3PlNPMAZ:TTHRz6zMAPgxed6BYudlNPMAZ

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.bfa6003163dff3fbb2a9903809f372b0.exe

    • Size

      96KB

    • MD5

      bfa6003163dff3fbb2a9903809f372b0

    • SHA1

      1a5901981c927f113e25de42e0921750922c8bde

    • SHA256

      10ddcc19a8e899ec5d7dc5e8033804c37646ccccf65c6db59a95dc2996e03792

    • SHA512

      ef16f08d1711c3eb142fd82f010603abaeb4d360ce383de5be96e8ee2f6533604e421a907ec211e11f2e849151cd3760c00c9539ebd69d68b406763e19dcf384

    • SSDEEP

      1536:TTePQZvx1Pz6URisvapMAPgnDNBrcN4i6tBYuR3PlNPMAZ:TTHRz6zMAPgxed6BYudlNPMAZ

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks