Overview

overview

10

Static

static

3

NEAS.440e3...a5.exe

windows7-x64

10

NEAS.440e3...a5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.440e32ff00e1e15f5a09d4e09b888ba5.exe

  • Size

    460KB

  • Sample

    231028-wf2glsec92

  • MD5

    440e32ff00e1e15f5a09d4e09b888ba5

  • SHA1

    a1efd1ce7d0889eac41017fa0986090243847700

  • SHA256

    106ba70c4f0640d58b4c742d5d2ded2f3f5f281a4a79229a8b65b19b997483b5

  • SHA512

    0a253d66fec711871e15d184bba758bdea24c40fdab6256ed615b504318f697438931382e69c26d340301743a76d7d626c6032b1a5288a2667d296ebb3249ccc

  • SSDEEP

    6144:bReVFzxceVk1STYaT15f7o+STYaT15fKj+v3WTlcy6TR9Tb:9MiedTYapJoTYapI2mTlQTfT

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.440e32ff00e1e15f5a09d4e09b888ba5.exe

    • Size

      460KB

    • MD5

      440e32ff00e1e15f5a09d4e09b888ba5

    • SHA1

      a1efd1ce7d0889eac41017fa0986090243847700

    • SHA256

      106ba70c4f0640d58b4c742d5d2ded2f3f5f281a4a79229a8b65b19b997483b5

    • SHA512

      0a253d66fec711871e15d184bba758bdea24c40fdab6256ed615b504318f697438931382e69c26d340301743a76d7d626c6032b1a5288a2667d296ebb3249ccc

    • SSDEEP

      6144:bReVFzxceVk1STYaT15f7o+STYaT15fKj+v3WTlcy6TR9Tb:9MiedTYapJoTYapI2mTlQTfT

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks