Overview

overview

7

Static

static

3

NEAS.992b0...70.exe

windows7-x64

7

NEAS.992b0...70.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.992b0a3feb990e512e2bbbfeaad23770.exe

  • Size

    310KB

  • Sample

    231016-w5fw7sge71

  • MD5

    992b0a3feb990e512e2bbbfeaad23770

  • SHA1

    2a33b270148a701344d6228ba543a9c2329fc758

  • SHA256

    9edb0a9644ab8619e6ba24fca3304b0eb21869469c06d83192df8ed8830892ae

  • SHA512

    ddf3eb360303a439a49182c500cf9f7488d448c8144985df166e7586687af325a1a8a09f4e7bce55536f5f5e7f9165b8a58c9b6fdb3526832431c2726c3c1d8c

  • SSDEEP

    6144:YplsmYOcOWi1KZ6x77PfxakLvlMP+sRIkwcL7Df+/fRROEP:YpyO/sEXgkL9vqx7DOfRRnP

Score
7/10

Malware Config

Targets

    • Target

      NEAS.992b0a3feb990e512e2bbbfeaad23770.exe

    • Size

      310KB

    • MD5

      992b0a3feb990e512e2bbbfeaad23770

    • SHA1

      2a33b270148a701344d6228ba543a9c2329fc758

    • SHA256

      9edb0a9644ab8619e6ba24fca3304b0eb21869469c06d83192df8ed8830892ae

    • SHA512

      ddf3eb360303a439a49182c500cf9f7488d448c8144985df166e7586687af325a1a8a09f4e7bce55536f5f5e7f9165b8a58c9b6fdb3526832431c2726c3c1d8c

    • SSDEEP

      6144:YplsmYOcOWi1KZ6x77PfxakLvlMP+sRIkwcL7Df+/fRROEP:YpyO/sEXgkL9vqx7DOfRRnP

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks