Overview

overview

10

Static

static

3

NEAS.4e16a...80.exe

windows7-x64

10

NEAS.4e16a...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.4e16a942296643d51fdb494c16be0180.exe

  • Size

    400KB

  • Sample

    231016-wyx7xadb3x

  • MD5

    4e16a942296643d51fdb494c16be0180

  • SHA1

    17ce6f372f36d37acf3f753e66845bc083e172fa

  • SHA256

    b245edc7e562daafe45e14444d13e0f68b99374a43aa18b5152f18e8ee875877

  • SHA512

    2926d9c329207409e6154691da52fcad101c3fd61a67ed33932dfb722aa1f1235af75562430c13a05b5686c33711c5f4410ee42923fe74059989194fbf2f188e

  • SSDEEP

    12288:v1rjijdMin/+zrWAI5KFum/+zrWAIAqWim/k:xjijdMinm0BmmvFimc

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.4e16a942296643d51fdb494c16be0180.exe

    • Size

      400KB

    • MD5

      4e16a942296643d51fdb494c16be0180

    • SHA1

      17ce6f372f36d37acf3f753e66845bc083e172fa

    • SHA256

      b245edc7e562daafe45e14444d13e0f68b99374a43aa18b5152f18e8ee875877

    • SHA512

      2926d9c329207409e6154691da52fcad101c3fd61a67ed33932dfb722aa1f1235af75562430c13a05b5686c33711c5f4410ee42923fe74059989194fbf2f188e

    • SSDEEP

      12288:v1rjijdMin/+zrWAI5KFum/+zrWAIAqWim/k:xjijdMinm0BmmvFimc

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks