Overview

overview

10

Static

static

3

NEAS.5de1c...90.exe

windows7-x64

10

NEAS.5de1c...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.5de1cd17cf67218937493497a57b7390.exe

  • Size

    384KB

  • Sample

    231022-vwhtrsfe52

  • MD5

    5de1cd17cf67218937493497a57b7390

  • SHA1

    70bd59bcfffc71166df5186a9d2d35e31f8d8e38

  • SHA256

    e44405e0fc3bcbb552e83ccb07a08bb5c1858ae472bcb04f6bbdd06fa925fd11

  • SHA512

    eb34d8bf1a4a81579b220fb820009b936e6a7396d9e629c463ee61c03b9cb30e5a2ac8ed62cd6fefdafb8f637f1364ebb867900856cf3cdd8a32eb9c3ae5f215

  • SSDEEP

    12288:0v+0xB+UDBdIA6h/Tz7+nLyB/sZHfLscbvkivkCwJ3HS:0vaP/sBL2S

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      NEAS.5de1cd17cf67218937493497a57b7390.exe

    • Size

      384KB

    • MD5

      5de1cd17cf67218937493497a57b7390

    • SHA1

      70bd59bcfffc71166df5186a9d2d35e31f8d8e38

    • SHA256

      e44405e0fc3bcbb552e83ccb07a08bb5c1858ae472bcb04f6bbdd06fa925fd11

    • SHA512

      eb34d8bf1a4a81579b220fb820009b936e6a7396d9e629c463ee61c03b9cb30e5a2ac8ed62cd6fefdafb8f637f1364ebb867900856cf3cdd8a32eb9c3ae5f215

    • SSDEEP

      12288:0v+0xB+UDBdIA6h/Tz7+nLyB/sZHfLscbvkivkCwJ3HS:0vaP/sBL2S

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks