Overview

overview

7

Static

static

7

NEAS.016c3...80.exe

windows7-x64

7

NEAS.016c3...80.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.016c3b031c952624be0a0a6cc1986480.exe

  • Size

    941KB

  • Sample

    231021-z18m7sad8z

  • MD5

    016c3b031c952624be0a0a6cc1986480

  • SHA1

    e5ed1d4a24aca96757fcecb0668617971ab0bb06

  • SHA256

    449ae377ebe2ed58a07ef90c3f1bbca1ab5677174ea4be063eda8de890c497f6

  • SHA512

    5d396a9a4d308b0b6f58ba3fd7c2ba2d49d360285ef84831a5699a22224b400649347f78dad2d7dfc9fe9c24732c98fe76a178f9bfdda95bb0c400f96b822c31

  • SSDEEP

    24576:4PxNmApPfuLt954VnwyZkW5Kfr2JcGwxm:4PnmiPcKVnl+W5KfqGhxm

Score
7/10
evasionupx

Malware Config

Targets

    • Target

      NEAS.016c3b031c952624be0a0a6cc1986480.exe

    • Size

      941KB

    • MD5

      016c3b031c952624be0a0a6cc1986480

    • SHA1

      e5ed1d4a24aca96757fcecb0668617971ab0bb06

    • SHA256

      449ae377ebe2ed58a07ef90c3f1bbca1ab5677174ea4be063eda8de890c497f6

    • SHA512

      5d396a9a4d308b0b6f58ba3fd7c2ba2d49d360285ef84831a5699a22224b400649347f78dad2d7dfc9fe9c24732c98fe76a178f9bfdda95bb0c400f96b822c31

    • SSDEEP

      24576:4PxNmApPfuLt954VnwyZkW5Kfr2JcGwxm:4PnmiPcKVnl+W5KfqGhxm

    Score
    7/10
    evasionupx

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks