Overview

overview

10

Static

static

3

NEAS.9f8d9...b0.exe

windows7-x64

10

NEAS.9f8d9...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.9f8d90381cce6d6efa9e5d1bc5835ab0.exe

  • Size

    4.3MB

  • Sample

    231028-yp3gdaba89

  • MD5

    9f8d90381cce6d6efa9e5d1bc5835ab0

  • SHA1

    e92fbaac46051b28d1e751da21a68b875284bedf

  • SHA256

    75252465fd562d56fe07990cd992a5f32bfaabeaa21f29c763762ddf3898d603

  • SHA512

    94b1e774cb4a17ccd724cc037612fc5609261f894988afaf21cd00e0d27f4a3af34cca81244fde5503e7e67895ec34ce90f3735af7ec30c7c9d9ab79a4afd78e

  • SSDEEP

    98304:gm7um7om7Vm7om7um7om7Vm7om7um7om7Vm7om7um7om7Vm7om7um7om7Vm7om77:gm7um7om7Vm7om7um7om7Vm7om7um7ot

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      NEAS.9f8d90381cce6d6efa9e5d1bc5835ab0.exe

    • Size

      4.3MB

    • MD5

      9f8d90381cce6d6efa9e5d1bc5835ab0

    • SHA1

      e92fbaac46051b28d1e751da21a68b875284bedf

    • SHA256

      75252465fd562d56fe07990cd992a5f32bfaabeaa21f29c763762ddf3898d603

    • SHA512

      94b1e774cb4a17ccd724cc037612fc5609261f894988afaf21cd00e0d27f4a3af34cca81244fde5503e7e67895ec34ce90f3735af7ec30c7c9d9ab79a4afd78e

    • SSDEEP

      98304:gm7um7om7Vm7om7um7om7Vm7om7um7om7Vm7om7um7om7Vm7om7um7om7Vm7om77:gm7um7om7Vm7om7um7om7Vm7om7um7ot

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks