Overview

overview

8

Static

static

3

NEAS.1a6a8...90.exe

windows7-x64

8

NEAS.1a6a8...90.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.1a6a88efc25bc3f2576656379dfc2690.exe

  • Size

    67KB

  • Sample

    231028-wnd2aafe93

  • MD5

    1a6a88efc25bc3f2576656379dfc2690

  • SHA1

    7d5476d33ea734a662c920f3522f214e45aeab11

  • SHA256

    58040296fa20f62f56a9bb7f5b643205c9618f9249d4815113c18144b1300645

  • SHA512

    6b22346ba4f521cdc886ba8eb07e65446d521a059a4e304d8aaa0be6536b36e8611e46eea9f60620c77ea53de3b5bb2c7be62178b57f6928aebf9d7105551d21

  • SSDEEP

    768:OrItKyw5WHXfQmjIiIk9ecAakMb96ZyXuDLdibfffbPPP4:Or3Z5IfQmv81abyyXcZibfffc

Score
8/10
evasion

Malware Config

Targets

    • Target

      NEAS.1a6a88efc25bc3f2576656379dfc2690.exe

    • Size

      67KB

    • MD5

      1a6a88efc25bc3f2576656379dfc2690

    • SHA1

      7d5476d33ea734a662c920f3522f214e45aeab11

    • SHA256

      58040296fa20f62f56a9bb7f5b643205c9618f9249d4815113c18144b1300645

    • SHA512

      6b22346ba4f521cdc886ba8eb07e65446d521a059a4e304d8aaa0be6536b36e8611e46eea9f60620c77ea53de3b5bb2c7be62178b57f6928aebf9d7105551d21

    • SSDEEP

      768:OrItKyw5WHXfQmjIiIk9ecAakMb96ZyXuDLdibfffbPPP4:Or3Z5IfQmv81abyyXcZibfffc

    Score
    8/10
    evasion

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks