General

  • Target

    NEAS.85c12e8f5cde7902432dea5eaff70b50.exe

  • Size

    499KB

  • Sample

    231021-z9kmqsgf74

  • MD5

    85c12e8f5cde7902432dea5eaff70b50

  • SHA1

    191db6a77f0f44bdf4b408072d2fe8b05eb8eb37

  • SHA256

    0568cce95dd3b00bba75de8f0af338c75b8d3a668a672f0f72987b08c0b9c0cb

  • SHA512

    920ebf0c708e49625e02b526a82074568e4d7252160acef62552cb6589ec9d4d5e05c8c6fa477be2e95d504f6a252cc260d0ea718f020010b70d0f1a51ec2b0c

  • SSDEEP

    12288:CjkArEN249AyE/rbaMcbEVHn7VvvpBjvrEH7R:1FE//TcYtNrEH7R

Score
7/10
upx

Malware Config

Targets

    • Target

      NEAS.85c12e8f5cde7902432dea5eaff70b50.exe

    • Size

      499KB

    • MD5

      85c12e8f5cde7902432dea5eaff70b50

    • SHA1

      191db6a77f0f44bdf4b408072d2fe8b05eb8eb37

    • SHA256

      0568cce95dd3b00bba75de8f0af338c75b8d3a668a672f0f72987b08c0b9c0cb

    • SHA512

      920ebf0c708e49625e02b526a82074568e4d7252160acef62552cb6589ec9d4d5e05c8c6fa477be2e95d504f6a252cc260d0ea718f020010b70d0f1a51ec2b0c

    • SSDEEP

      12288:CjkArEN249AyE/rbaMcbEVHn7VvvpBjvrEH7R:1FE//TcYtNrEH7R

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

MITRE ATT&CK Enterprise v15

Tasks