Overview

overview

7

Static

static

3

NEAS.11fac...a0.exe

windows7-x64

7

NEAS.11fac...a0.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.11fac1965e533a042f46fc8567a413a0.exe

  • Size

    465KB

  • Sample

    231028-wmydjadf8s

  • MD5

    11fac1965e533a042f46fc8567a413a0

  • SHA1

    e239bc33d4420a5b412331450a931e6da02c9e2b

  • SHA256

    abe5c803a8e1d9ab78f09cf220e27dbf51f2d30580d0415f4b78d2209407a53f

  • SHA512

    c274f6a35b28cec958e24c60ff1f1d39d59569b927e897239dad8b9cfa5510f3fe11bcb1e442455f10d1c91db301e152b223acd27c36192da358f13bd61d4fee

  • SSDEEP

    6144:mBapC9DUIYmO5Kv5Q7X/l/rYvkW1VxxfnzrV9UAH0ctkPfc92F8fLpIh9jil:5pQD+mO5KWy/zrVbt4fcYw9U9jI

Score
7/10
persistence

Malware Config

Targets

    • Target

      NEAS.11fac1965e533a042f46fc8567a413a0.exe

    • Size

      465KB

    • MD5

      11fac1965e533a042f46fc8567a413a0

    • SHA1

      e239bc33d4420a5b412331450a931e6da02c9e2b

    • SHA256

      abe5c803a8e1d9ab78f09cf220e27dbf51f2d30580d0415f4b78d2209407a53f

    • SHA512

      c274f6a35b28cec958e24c60ff1f1d39d59569b927e897239dad8b9cfa5510f3fe11bcb1e442455f10d1c91db301e152b223acd27c36192da358f13bd61d4fee

    • SSDEEP

      6144:mBapC9DUIYmO5Kv5Q7X/l/rYvkW1VxxfnzrV9UAH0ctkPfc92F8fLpIh9jil:5pQD+mO5KWy/zrVbt4fcYw9U9jI

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks