Overview

overview

10

Static

static

7

NEAS.0b60c...90.exe

windows7-x64

10

NEAS.0b60c...90.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.0b60c4cc3a5e09713b0b83cadce54c90.exe

  • Size

    31KB

  • Sample

    231021-z2sclsag3x

  • MD5

    0b60c4cc3a5e09713b0b83cadce54c90

  • SHA1

    a01c6e990480c755a6e8321f25fe73307f0e70d8

  • SHA256

    020c78680cc2aa9f2ea5caf799f2a78db207592e647b26f3c877224235ba2e5a

  • SHA512

    ee391bf264a86e19c776029b244f4b1852e10c19c05ef9b3953b3eb2bb2f7f3a998b8e642a4b8cc0eabd2cff54c1b33e182245a7e3c35d955510d83c418da3a2

  • SSDEEP

    768:tQbuQRy2UjmUndnlTttxDn+3jiSkjRY6AB7kKfYoJ+ifBEewzwr:QuQRylaUDTDxDXjy6AB7koYy24r

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      NEAS.0b60c4cc3a5e09713b0b83cadce54c90.exe

    • Size

      31KB

    • MD5

      0b60c4cc3a5e09713b0b83cadce54c90

    • SHA1

      a01c6e990480c755a6e8321f25fe73307f0e70d8

    • SHA256

      020c78680cc2aa9f2ea5caf799f2a78db207592e647b26f3c877224235ba2e5a

    • SHA512

      ee391bf264a86e19c776029b244f4b1852e10c19c05ef9b3953b3eb2bb2f7f3a998b8e642a4b8cc0eabd2cff54c1b33e182245a7e3c35d955510d83c418da3a2

    • SSDEEP

      768:tQbuQRy2UjmUndnlTttxDn+3jiSkjRY6AB7kKfYoJ+ifBEewzwr:QuQRylaUDTDxDXjy6AB7koYy24r

    Score
    10/10
    evasionpersistencetrojanupx

    • Windows security bypass

      evasiontrojan

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks