Overview

overview

7

Static

static

3

NEAS.278f3...50.exe

windows7-x64

7

NEAS.278f3...50.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.278f307044901b1c38c08d934fce5350.exe

  • Size

    8.3MB

  • Sample

    231022-vs4bascb5v

  • MD5

    278f307044901b1c38c08d934fce5350

  • SHA1

    791e6d47610df33c1583e4e0109f230ffce5d68f

  • SHA256

    d08773666bbe82128813fdbf750e982a810d1440b79164c39a239f6993b3465a

  • SHA512

    89343ebe07789155be92e0817af92782dfbc6c5d060d7173c72677fa0f357fa57f1fc18f7520e937e1237070094a5dad90c1d198ac51b57aea9e7acbb924de28

  • SSDEEP

    98304:bts3mbiwGdE8t0H+N4YwheUFzt6LRsIJ7tYaTpPcvad:bmvRdEy0HwSeQ6lJpcm

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      NEAS.278f307044901b1c38c08d934fce5350.exe

    • Size

      8.3MB

    • MD5

      278f307044901b1c38c08d934fce5350

    • SHA1

      791e6d47610df33c1583e4e0109f230ffce5d68f

    • SHA256

      d08773666bbe82128813fdbf750e982a810d1440b79164c39a239f6993b3465a

    • SHA512

      89343ebe07789155be92e0817af92782dfbc6c5d060d7173c72677fa0f357fa57f1fc18f7520e937e1237070094a5dad90c1d198ac51b57aea9e7acbb924de28

    • SSDEEP

      98304:bts3mbiwGdE8t0H+N4YwheUFzt6LRsIJ7tYaTpPcvad:bmvRdEy0HwSeQ6lJpcm

    Score
    7/10
    bootkitpersistenceupx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks