Overview

overview

10

Static

static

3

NEAS.fc377...90.exe

windows7-x64

10

NEAS.fc377...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.fc3775a630ef13715d49130070924f90.exe

  • Size

    475KB

  • Sample

    231028-y36e7adc21

  • MD5

    fc3775a630ef13715d49130070924f90

  • SHA1

    8266716aecf689149dafaf747fb179c5bbfab63c

  • SHA256

    c05f48cec5b71e33d3f2688202c58bb254707850a189c73f70f2d98cb97a22dd

  • SHA512

    e3b07fdae572335e6369002c166a0e262d4e00b7b19251c34b5a17ff6e24f1c6887a65428d47cf092ca27af64d606434f7a8bce94c608e2b7206784378c102d5

  • SSDEEP

    6144:pjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJ9+1aTEPTnOK4JKElY:nRDc3yWDNU+YUznzNjElWaT07NQtY

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      NEAS.fc3775a630ef13715d49130070924f90.exe

    • Size

      475KB

    • MD5

      fc3775a630ef13715d49130070924f90

    • SHA1

      8266716aecf689149dafaf747fb179c5bbfab63c

    • SHA256

      c05f48cec5b71e33d3f2688202c58bb254707850a189c73f70f2d98cb97a22dd

    • SHA512

      e3b07fdae572335e6369002c166a0e262d4e00b7b19251c34b5a17ff6e24f1c6887a65428d47cf092ca27af64d606434f7a8bce94c608e2b7206784378c102d5

    • SSDEEP

      6144:pjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJ9+1aTEPTnOK4JKElY:nRDc3yWDNU+YUznzNjElWaT07NQtY

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Sets service image path in registry

      persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks