Overview

overview

10

Static

static

3

NEAS.e3450...20.exe

windows7-x64

10

NEAS.e3450...20.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.e34504893134c364f54de498a29f3320.exe

  • Size

    101KB

  • Sample

    231021-1feeasag4z

  • MD5

    e34504893134c364f54de498a29f3320

  • SHA1

    e3f4ae02ab2829619c72db2c5993a679699b667d

  • SHA256

    d406f48bf3a7c7d288fd7851b6ff36f579beb62c206ed28a9cbb0d5a1f430d4f

  • SHA512

    f8a4313f2462f72a93c7d5b6bfbdee19678943aaec2d788d9eb45a3e82f84562e7cb9af25e620c58db42c5630d8fa19f9ccb5087aeb32a1b544dae6ee4ab39fd

  • SSDEEP

    3072:WBrNQL1LPUe3S3/zrB3g3k8p4qI4/HQCC:WN217vePBZs/HNC

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.e34504893134c364f54de498a29f3320.exe

    • Size

      101KB

    • MD5

      e34504893134c364f54de498a29f3320

    • SHA1

      e3f4ae02ab2829619c72db2c5993a679699b667d

    • SHA256

      d406f48bf3a7c7d288fd7851b6ff36f579beb62c206ed28a9cbb0d5a1f430d4f

    • SHA512

      f8a4313f2462f72a93c7d5b6bfbdee19678943aaec2d788d9eb45a3e82f84562e7cb9af25e620c58db42c5630d8fa19f9ccb5087aeb32a1b544dae6ee4ab39fd

    • SSDEEP

      3072:WBrNQL1LPUe3S3/zrB3g3k8p4qI4/HQCC:WN217vePBZs/HNC

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks