Overview

overview

9

Static

static

3

NEAS.18daf...JC.exe

windows7-x64

9

NEAS.18daf...JC.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.18daf2c5c1dda61313fa8a66de6f2910_JC.exe

  • Size

    116KB

  • Sample

    231023-z64w7sfg7v

  • MD5

    18daf2c5c1dda61313fa8a66de6f2910

  • SHA1

    b0e4de4140e5abca7e813565b241a97869be1215

  • SHA256

    3ce924fd088f5b4a0e47abea4476620f7112201a75a15fb5706d978fe831ea6c

  • SHA512

    673085da182bafbccccac245bd2a9d8ad1b1327c5d62b67b7e5e5324547318b19f41c102db69be35dc9acd00c2d8d03f151e44d02ef9cec2e0af6df5a936b550

  • SSDEEP

    1536:W7Z+pApfGQ3y3RWsryOFTcTSbyEmOTcTSbyEmw+I8K/XCKCGSqzV0:6+WpArfTcTSWEmOTcTSWEmw+ufC58m

Score
9/10
ransomware

Malware Config

Targets

    • Target

      NEAS.18daf2c5c1dda61313fa8a66de6f2910_JC.exe

    • Size

      116KB

    • MD5

      18daf2c5c1dda61313fa8a66de6f2910

    • SHA1

      b0e4de4140e5abca7e813565b241a97869be1215

    • SHA256

      3ce924fd088f5b4a0e47abea4476620f7112201a75a15fb5706d978fe831ea6c

    • SHA512

      673085da182bafbccccac245bd2a9d8ad1b1327c5d62b67b7e5e5324547318b19f41c102db69be35dc9acd00c2d8d03f151e44d02ef9cec2e0af6df5a936b550

    • SSDEEP

      1536:W7Z+pApfGQ3y3RWsryOFTcTSbyEmOTcTSbyEmw+I8K/XCKCGSqzV0:6+WpArfTcTSWEmOTcTSWEmw+ufC58m

    Score
    9/10
    ransomware

    • Renames multiple (1302) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Renames multiple (593) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks