Overview

overview

10

Static

static

3

NEAS.3861e...a0.exe

windows7-x64

10

NEAS.3861e...a0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.3861e659d4b3f1543f2e7006256d4fa0.exe

  • Size

    192KB

  • Sample

    231016-ww94padg64

  • MD5

    3861e659d4b3f1543f2e7006256d4fa0

  • SHA1

    ba618f03fa43d8e7bdf1004eaf80004ccb290e64

  • SHA256

    021ecbf9061a2f99253baa9e2ddbd6f7d34c480eba047abc5d43a779fe91da66

  • SHA512

    d318ae107d20b27e607a63bf5a38452021e35a58719ee6bbebd3c22fe5667bb90ef0dd076024a3e9212836b07e6f78a45e572d34e5f736926ace5c40984ceb10

  • SSDEEP

    3072:TPzE570GFMm1FGuYq1iV4gzL20WKFcp9jRV5C/8qy4p2Y7YWlt6o:TPo3FMm1JYxKgzL2V4cpC0L4AY7YWT6o

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.3861e659d4b3f1543f2e7006256d4fa0.exe

    • Size

      192KB

    • MD5

      3861e659d4b3f1543f2e7006256d4fa0

    • SHA1

      ba618f03fa43d8e7bdf1004eaf80004ccb290e64

    • SHA256

      021ecbf9061a2f99253baa9e2ddbd6f7d34c480eba047abc5d43a779fe91da66

    • SHA512

      d318ae107d20b27e607a63bf5a38452021e35a58719ee6bbebd3c22fe5667bb90ef0dd076024a3e9212836b07e6f78a45e572d34e5f736926ace5c40984ceb10

    • SSDEEP

      3072:TPzE570GFMm1FGuYq1iV4gzL20WKFcp9jRV5C/8qy4p2Y7YWlt6o:TPo3FMm1JYxKgzL2V4cpC0L4AY7YWT6o

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks