Overview

overview

10

Static

static

3

NEAS.796dd...00.exe

windows7-x64

10

NEAS.796dd...00.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.796dd4bff5ca5b8b23bbbc63ae83f300.exe

  • Size

    396KB

  • Sample

    231016-w2zj5sgf72

  • MD5

    796dd4bff5ca5b8b23bbbc63ae83f300

  • SHA1

    170f78249bbe6c2ef22744d4d1959da9ef49f999

  • SHA256

    a03bfa75932b67aecc701ee81ec43a042f77cc57a53be8319dac02e1e986aea2

  • SHA512

    1eda49311ac33ae9ee9d4231bd78aaccb27baa83f2644bf6031f1e68a4c06098bf145c465d334629bfe065bb85fccf4e2f0d1f0e00f9bdb975d46524935db387

  • SSDEEP

    12288:hbTrwksaaOAgCRMsh/wSUzm7D/BuMLc32AM77T8/ZvE1DqiLj:hnrw/9h/wSUzm7D/BuMLc32AM77T8/52

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.796dd4bff5ca5b8b23bbbc63ae83f300.exe

    • Size

      396KB

    • MD5

      796dd4bff5ca5b8b23bbbc63ae83f300

    • SHA1

      170f78249bbe6c2ef22744d4d1959da9ef49f999

    • SHA256

      a03bfa75932b67aecc701ee81ec43a042f77cc57a53be8319dac02e1e986aea2

    • SHA512

      1eda49311ac33ae9ee9d4231bd78aaccb27baa83f2644bf6031f1e68a4c06098bf145c465d334629bfe065bb85fccf4e2f0d1f0e00f9bdb975d46524935db387

    • SSDEEP

      12288:hbTrwksaaOAgCRMsh/wSUzm7D/BuMLc32AM77T8/ZvE1DqiLj:hnrw/9h/wSUzm7D/BuMLc32AM77T8/52

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks