Overview

overview

10

Static

static

3

NEAS.c48ac...80.exe

windows7-x64

10

NEAS.c48ac...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.c48ac42c9b1726f2b729bf04332bc280.exe

  • Size

    81KB

  • Sample

    231014-xwrg1sga9s

  • MD5

    c48ac42c9b1726f2b729bf04332bc280

  • SHA1

    ef3eb583b2dbef1a6eda248a4f90aed8f20e220b

  • SHA256

    1ab1a8a161c97e357f6928d510e7505c37d0404d3717acd6bf5793f0c41cc948

  • SHA512

    91a1bdeffbd7d393663ab395191d74be772870c8bbfeb09524df936279c9d28036f28e4458d0fdf7d68a983622e658088cb22bc42b35189f0ad973614898b87e

  • SSDEEP

    1536:nirZNDSyYOHkefKLxElzmTNYej5v7m4LO++/+1m6KadhYxU33HX0L:CZNuyYOHhfJzkYcv/LrCimBaH8UH30L

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.c48ac42c9b1726f2b729bf04332bc280.exe

    • Size

      81KB

    • MD5

      c48ac42c9b1726f2b729bf04332bc280

    • SHA1

      ef3eb583b2dbef1a6eda248a4f90aed8f20e220b

    • SHA256

      1ab1a8a161c97e357f6928d510e7505c37d0404d3717acd6bf5793f0c41cc948

    • SHA512

      91a1bdeffbd7d393663ab395191d74be772870c8bbfeb09524df936279c9d28036f28e4458d0fdf7d68a983622e658088cb22bc42b35189f0ad973614898b87e

    • SSDEEP

      1536:nirZNDSyYOHkefKLxElzmTNYej5v7m4LO++/+1m6KadhYxU33HX0L:CZNuyYOHhfJzkYcv/LrCimBaH8UH30L

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks