Overview

overview

7

Static

static

3

NEAS.6c483...50.exe

windows7-x64

5

NEAS.6c483...50.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.6c483ffc62bf8034b7f7793f0461b850.exe

  • Size

    172KB

  • Sample

    231028-yndrmahh65

  • MD5

    6c483ffc62bf8034b7f7793f0461b850

  • SHA1

    aed1375bd939f7afe1b4f74f30dc13c6bb9faaa0

  • SHA256

    19564bf495a7547bc00439a281211c9d85b97fadc642f336bbf542959de7322a

  • SHA512

    4573cc5ccb9c45148754edbe8035a293bdabcfbdbddd5ef59c2360d1878cb16d6e63730c0910dbe8e1ab24238f19101cb118b80c495045be96fee6ba60a47483

  • SSDEEP

    3072:g14mOxrKFNZYhrgtRFuV2DDbuiTf3hPsOraS87FYqjTZbn4TGh:gnYWYhrgtRo6DSiTf3hPswa1TZjxh

Score
7/10
persistence

Malware Config

Targets

    • Target

      NEAS.6c483ffc62bf8034b7f7793f0461b850.exe

    • Size

      172KB

    • MD5

      6c483ffc62bf8034b7f7793f0461b850

    • SHA1

      aed1375bd939f7afe1b4f74f30dc13c6bb9faaa0

    • SHA256

      19564bf495a7547bc00439a281211c9d85b97fadc642f336bbf542959de7322a

    • SHA512

      4573cc5ccb9c45148754edbe8035a293bdabcfbdbddd5ef59c2360d1878cb16d6e63730c0910dbe8e1ab24238f19101cb118b80c495045be96fee6ba60a47483

    • SSDEEP

      3072:g14mOxrKFNZYhrgtRFuV2DDbuiTf3hPsOraS87FYqjTZbn4TGh:gnYWYhrgtRo6DSiTf3hPswa1TZjxh

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Checks for any installed AV software in registry

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks