Overview

overview

9

Static

static

3

NEAS.428c0...60.exe

windows7-x64

9

NEAS.428c0...60.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.428c081790f2fc6c37be92445fac0660.exe

  • Size

    94KB

  • Sample

    231021-z5v8nsec85

  • MD5

    428c081790f2fc6c37be92445fac0660

  • SHA1

    c5cf832255074597f3820b54606c964a17091831

  • SHA256

    ad14a79f22bbb51050e70d900e5fc9df59aca90655dcfecad829c9a031b50bf5

  • SHA512

    580a6e0cb69276981533cdc78918fe191d2bc9b5ae90f8088bf943fe76cd71f9c000d25891d779db49014c6b3d8d2b38c5ba310e991f6421ddc64823fadcf98a

  • SSDEEP

    1536:W7ZhA7pApvOsOKkIf7ZhA7pApvOsOKkIRpU:6e7Wpbe7Wp3pU

Score
9/10
ransomware

Malware Config

Targets

    • Target

      NEAS.428c081790f2fc6c37be92445fac0660.exe

    • Size

      94KB

    • MD5

      428c081790f2fc6c37be92445fac0660

    • SHA1

      c5cf832255074597f3820b54606c964a17091831

    • SHA256

      ad14a79f22bbb51050e70d900e5fc9df59aca90655dcfecad829c9a031b50bf5

    • SHA512

      580a6e0cb69276981533cdc78918fe191d2bc9b5ae90f8088bf943fe76cd71f9c000d25891d779db49014c6b3d8d2b38c5ba310e991f6421ddc64823fadcf98a

    • SSDEEP

      1536:W7ZhA7pApvOsOKkIf7ZhA7pApvOsOKkIRpU:6e7Wpbe7Wp3pU

    Score
    9/10
    ransomware

    • Renames multiple (1306) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Renames multiple (295) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks