Overview

overview

10

Static

static

1

NEAS.3818c...30.exe

windows7-x64

10

NEAS.3818c...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.3818c107f33a83e67d6aa1c187e68330.exe

  • Size

    209KB

  • Sample

    231028-ylqneafa6t

  • MD5

    3818c107f33a83e67d6aa1c187e68330

  • SHA1

    dda53fe23153da45d10bc9687402875b1eeb4679

  • SHA256

    dfaceba3c3270c15a1ccc040a0e94e60ae0e9f7f5147e6b34f744ad3dc2b028a

  • SHA512

    913a5d74c61116fc312ea777d751cd0cbea703eadc3bba8cee6972a76e78f23cf1dfdc1a5287729b43d7c7af0a5dcab31b883f256e3e21257fcf1a33b3facafa

  • SSDEEP

    3072:AQcjk9tVRNIcjb4Ryfjijjx14hdeCXHKPJFo9zpE7Di0X0JuLL+o7BlpF9e:AQh9tVRm2kh34hdeCkcG7DEALLlnN

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      NEAS.3818c107f33a83e67d6aa1c187e68330.exe

    • Size

      209KB

    • MD5

      3818c107f33a83e67d6aa1c187e68330

    • SHA1

      dda53fe23153da45d10bc9687402875b1eeb4679

    • SHA256

      dfaceba3c3270c15a1ccc040a0e94e60ae0e9f7f5147e6b34f744ad3dc2b028a

    • SHA512

      913a5d74c61116fc312ea777d751cd0cbea703eadc3bba8cee6972a76e78f23cf1dfdc1a5287729b43d7c7af0a5dcab31b883f256e3e21257fcf1a33b3facafa

    • SSDEEP

      3072:AQcjk9tVRNIcjb4Ryfjijjx14hdeCXHKPJFo9zpE7Di0X0JuLL+o7BlpF9e:AQh9tVRm2kh34hdeCkcG7DEALLlnN

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks