Overview

overview

7

Static

static

1

NEAS.46f8f...10.exe

windows7-x64

7

NEAS.46f8f...10.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.46f8f366ef12bd8c6c3e47c8a03d8610.exe

  • Size

    12KB

  • Sample

    231016-wybnxaed99

  • MD5

    46f8f366ef12bd8c6c3e47c8a03d8610

  • SHA1

    e476251e083e7f43b5f73b6de25028d323de9f76

  • SHA256

    63ac9747a66fc5a5832c46ba4e14560d11628b4622437c9a09aedbc480b08341

  • SHA512

    9896588015163fcb916908dc8af76f2ae513dd820242930fcf9936d8ca50254ee20d7f24c84bf0b5bf4a9e84c4320a8c625cb0275380aa1d2fc44544baf1a311

  • SSDEEP

    384:bL7li/2zBq2DcEQvdhcJKLTp/NK9xaPu:PJM/Q9cPu

Score
7/10

Malware Config

Targets

    • Target

      NEAS.46f8f366ef12bd8c6c3e47c8a03d8610.exe

    • Size

      12KB

    • MD5

      46f8f366ef12bd8c6c3e47c8a03d8610

    • SHA1

      e476251e083e7f43b5f73b6de25028d323de9f76

    • SHA256

      63ac9747a66fc5a5832c46ba4e14560d11628b4622437c9a09aedbc480b08341

    • SHA512

      9896588015163fcb916908dc8af76f2ae513dd820242930fcf9936d8ca50254ee20d7f24c84bf0b5bf4a9e84c4320a8c625cb0275380aa1d2fc44544baf1a311

    • SSDEEP

      384:bL7li/2zBq2DcEQvdhcJKLTp/NK9xaPu:PJM/Q9cPu

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks