Overview

overview

9

Static

static

3

NEAS.4e954...90.exe

windows7-x64

9

NEAS.4e954...90.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.4e954b3462204a12c917896dce32bd90.exe

  • Size

    619KB

  • Sample

    231021-z6hc7seg39

  • MD5

    4e954b3462204a12c917896dce32bd90

  • SHA1

    019f6d7cbfc31ffdf3e12f7ef6b51b7947c65cff

  • SHA256

    825f9c6f9151808f3cc7bc9f497b94779468af9bedf14e14d88ed9d584d64d49

  • SHA512

    b332520648e43fd5bc8f7e44cb2bd9ee30c22de6cca77a9c8c5a58c54f22e06bfba469eff43f1ddba5c5d99bf0bd4b214ba08f36ff56b3e1c0d3f56aebfed931

  • SSDEEP

    3072:6e7WpmWFbOE5f5F08mgoZRi7iXrXhNJrK2QIp1rp1F5RgRe7WpmWFbOE5f5F08mK:RqoyOMf5F0aIhTqoyOMf5F0aIh1QT

Score
9/10
ransomware

Malware Config

Targets

    • Target

      NEAS.4e954b3462204a12c917896dce32bd90.exe

    • Size

      619KB

    • MD5

      4e954b3462204a12c917896dce32bd90

    • SHA1

      019f6d7cbfc31ffdf3e12f7ef6b51b7947c65cff

    • SHA256

      825f9c6f9151808f3cc7bc9f497b94779468af9bedf14e14d88ed9d584d64d49

    • SHA512

      b332520648e43fd5bc8f7e44cb2bd9ee30c22de6cca77a9c8c5a58c54f22e06bfba469eff43f1ddba5c5d99bf0bd4b214ba08f36ff56b3e1c0d3f56aebfed931

    • SSDEEP

      3072:6e7WpmWFbOE5f5F08mgoZRi7iXrXhNJrK2QIp1rp1F5RgRe7WpmWFbOE5f5F08mK:RqoyOMf5F0aIhTqoyOMf5F0aIh1QT

    Score
    9/10
    ransomware

    • Renames multiple (297) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Renames multiple (62) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks