Overview

overview

10

Static

static

3

NEAS.d5624...10.exe

windows7-x64

10

NEAS.d5624...10.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.d56249b7711d6921ec8c6ed4856a3b10.exe

  • Size

    257KB

  • Sample

    231014-xyek8sah65

  • MD5

    d56249b7711d6921ec8c6ed4856a3b10

  • SHA1

    b1cf505102b8faaf9eb0efda5d451b3a87d1bf6a

  • SHA256

    163e303a06ad8cbdfcf50b818ef499c389134687c3900278cb4d29282f02b283

  • SHA512

    f6e0df12305bdcaa41970abe735e1c62eb31476493f2081dd8eb0ab6f97efc3e3b4b2c7c326e2a32ff2d72cfb2166af9e891eeca39a269905050b853cf7b1dae

  • SSDEEP

    3072:kMMgOKyfKyg+fwjwbiutmIFNkoutkTy27zh5cl:E1DO+fwjJutRFNkoSkTl7zjK

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.d56249b7711d6921ec8c6ed4856a3b10.exe

    • Size

      257KB

    • MD5

      d56249b7711d6921ec8c6ed4856a3b10

    • SHA1

      b1cf505102b8faaf9eb0efda5d451b3a87d1bf6a

    • SHA256

      163e303a06ad8cbdfcf50b818ef499c389134687c3900278cb4d29282f02b283

    • SHA512

      f6e0df12305bdcaa41970abe735e1c62eb31476493f2081dd8eb0ab6f97efc3e3b4b2c7c326e2a32ff2d72cfb2166af9e891eeca39a269905050b853cf7b1dae

    • SSDEEP

      3072:kMMgOKyfKyg+fwjwbiutmIFNkoutkTy27zh5cl:E1DO+fwjJutRFNkoSkTl7zjK

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks