General
-
Target
NEAS.4369ba43a042003b0e124de94f40e740_JC.exe
-
Size
6.6MB
-
Sample
231021-n43etaga46
-
MD5
4369ba43a042003b0e124de94f40e740
-
SHA1
4e4d55cd418cc637ec122f193556c44e1a6c1e51
-
SHA256
172d33c57ba3328701794e119b475fe28f0c3c2eed4a4046738665565e51c912
-
SHA512
ccaed218901d09a2ee95c8991f8d489e0d327e95aad70bebcc3c80ab2f68ff600e5fad93cba5734bdacbc5aa86f73918c052865e227a10f8fe61a35854063479
-
SSDEEP
196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazc:kfauN/HYOSIT/EVF9A
Malware Config
Targets
-
-
Target
NEAS.4369ba43a042003b0e124de94f40e740_JC.exe
-
Size
6.6MB
-
MD5
4369ba43a042003b0e124de94f40e740
-
SHA1
4e4d55cd418cc637ec122f193556c44e1a6c1e51
-
SHA256
172d33c57ba3328701794e119b475fe28f0c3c2eed4a4046738665565e51c912
-
SHA512
ccaed218901d09a2ee95c8991f8d489e0d327e95aad70bebcc3c80ab2f68ff600e5fad93cba5734bdacbc5aa86f73918c052865e227a10f8fe61a35854063479
-
SSDEEP
196608:eAqjTpnhXlmyWCZNulPKQ8hY/Bkr/fOIT/+VdlBFKazc:kfauN/HYOSIT/EVF9A
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Loads dropped DLL
-