Overview

overview

10

Static

static

3

NEAS.ed128...40.exe

windows7-x64

10

NEAS.ed128...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.ed12820a7dac16bd3bc576d2f507aa40.exe

  • Size

    1.5MB

  • Sample

    231028-y26dsseb67

  • MD5

    ed12820a7dac16bd3bc576d2f507aa40

  • SHA1

    34785deca8a2a67ac899fcc3f5db80a52570fc72

  • SHA256

    1aad11bb3d9ac908162d2386ce3d6025dfeeb3b4c83466b3261825f4133b4b09

  • SHA512

    ea5524319438f385e47d861e56225cee1e0f8bed95007716c590483c2f9f54a6170806e2d3c0206bd2de7fc4df26cb713c2e6d13655c1a1436413646f7b27095

  • SSDEEP

    12288:Ts69JfPbWGRdA6sQxuEuZH8WF50+OJ3BHCXwpnsKvNA+XTvZHWuEo3oWB+:TF9JzecI50+YNpsKv2EvZHp3oWB+

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.ed12820a7dac16bd3bc576d2f507aa40.exe

    • Size

      1.5MB

    • MD5

      ed12820a7dac16bd3bc576d2f507aa40

    • SHA1

      34785deca8a2a67ac899fcc3f5db80a52570fc72

    • SHA256

      1aad11bb3d9ac908162d2386ce3d6025dfeeb3b4c83466b3261825f4133b4b09

    • SHA512

      ea5524319438f385e47d861e56225cee1e0f8bed95007716c590483c2f9f54a6170806e2d3c0206bd2de7fc4df26cb713c2e6d13655c1a1436413646f7b27095

    • SSDEEP

      12288:Ts69JfPbWGRdA6sQxuEuZH8WF50+OJ3BHCXwpnsKvNA+XTvZHWuEo3oWB+:TF9JzecI50+YNpsKv2EvZHp3oWB+

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks