Overview

overview

10

Static

static

7

NEAS.5125d...d0.exe

windows7-x64

10

NEAS.5125d...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.5125d7c2331e20e17b9e0c74be432dd0.exe

  • Size

    19KB

  • Sample

    231028-ymgf5ahc72

  • MD5

    5125d7c2331e20e17b9e0c74be432dd0

  • SHA1

    aaa402e2834587cc7deb28124966013fd7c738da

  • SHA256

    57bd8fa92c732e33906d6c32d4ea541c184c9fb0701e91194f92ea3d11ee97ad

  • SHA512

    a1b3db9fe32f86a3e9f839d14e498be3c433552e81f725cf04695b7a15ff0496345bc0c797adaf702d9b2e3e843d364695c7fd5740f10af82fe2ee1565263b2a

  • SSDEEP

    384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvXaBTkfB6E:rRkiLw3HsDSARGG/2Tkpj

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      NEAS.5125d7c2331e20e17b9e0c74be432dd0.exe

    • Size

      19KB

    • MD5

      5125d7c2331e20e17b9e0c74be432dd0

    • SHA1

      aaa402e2834587cc7deb28124966013fd7c738da

    • SHA256

      57bd8fa92c732e33906d6c32d4ea541c184c9fb0701e91194f92ea3d11ee97ad

    • SHA512

      a1b3db9fe32f86a3e9f839d14e498be3c433552e81f725cf04695b7a15ff0496345bc0c797adaf702d9b2e3e843d364695c7fd5740f10af82fe2ee1565263b2a

    • SSDEEP

      384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvXaBTkfB6E:rRkiLw3HsDSARGG/2Tkpj

    Score
    10/10
    evasionpersistencetrojanupx

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks