Overview

overview

10

Static

static

3

NEAS.491b7...50.exe

windows7-x64

10

NEAS.491b7...50.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.491b7c60e7c5496ee1d0a9cb2d493350.exe

  • Size

    451KB

  • Sample

    231028-yl9fhshb45

  • MD5

    491b7c60e7c5496ee1d0a9cb2d493350

  • SHA1

    2b5b60e92ad32f1a97936fbbb72ad1c20483bb76

  • SHA256

    b6cd1614f5221f29003063a9c5570cd9dd5491fdf298c72d83b79578427ef253

  • SHA512

    dd4199cd83f74127651d54d5b6a95d2b1ad84346ed7f3a818fbc50be5d7a04213967bffc008028d6a6b2e27389eff96e644b8bc0ac265e9022adaaf3ec66e2ee

  • SSDEEP

    6144:pl7xvPQ///NR5fLYG3eujPQ///NR5fqZo4tjS6Y:Pk/NcZ7/NC64tm6Y

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.491b7c60e7c5496ee1d0a9cb2d493350.exe

    • Size

      451KB

    • MD5

      491b7c60e7c5496ee1d0a9cb2d493350

    • SHA1

      2b5b60e92ad32f1a97936fbbb72ad1c20483bb76

    • SHA256

      b6cd1614f5221f29003063a9c5570cd9dd5491fdf298c72d83b79578427ef253

    • SHA512

      dd4199cd83f74127651d54d5b6a95d2b1ad84346ed7f3a818fbc50be5d7a04213967bffc008028d6a6b2e27389eff96e644b8bc0ac265e9022adaaf3ec66e2ee

    • SSDEEP

      6144:pl7xvPQ///NR5fLYG3eujPQ///NR5fqZo4tjS6Y:Pk/NcZ7/NC64tm6Y

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks