General

  • Target

    NEAS.c18187094b367e940668932dee285eb0_JC.exe

  • Size

    119KB

  • Sample

    231101-1m2s6sfc24

  • MD5

    c18187094b367e940668932dee285eb0

  • SHA1

    1678417c2db7ade992e7ebe6b2cd0323f778e26b

  • SHA256

    175a64883b03ffd1b21105812807a62cbd99b0a985f034399d70203388a81203

  • SHA512

    befb4bfd4f0996eacf70e7a645b4d38ea44273611bff8c1af1b691fe06cb7df995e28e99ec321b67e12d5d473b7903332ce9b66723829a56fcf8fd603e6a61cf

  • SSDEEP

    3072:aH8E4CeBLHfYzhz+cuFcdVyaEXsOoHvFwY6i0WDV:aH8vRBMFzbCGVUXsBHBSO

Score
8/10

Malware Config

Targets

    • Target

      NEAS.c18187094b367e940668932dee285eb0_JC.exe

    • Size

      119KB

    • MD5

      c18187094b367e940668932dee285eb0

    • SHA1

      1678417c2db7ade992e7ebe6b2cd0323f778e26b

    • SHA256

      175a64883b03ffd1b21105812807a62cbd99b0a985f034399d70203388a81203

    • SHA512

      befb4bfd4f0996eacf70e7a645b4d38ea44273611bff8c1af1b691fe06cb7df995e28e99ec321b67e12d5d473b7903332ce9b66723829a56fcf8fd603e6a61cf

    • SSDEEP

      3072:aH8E4CeBLHfYzhz+cuFcdVyaEXsOoHvFwY6i0WDV:aH8vRBMFzbCGVUXsBHBSO

    Score
    8/10
    • Contacts a large (529) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Deletes itself

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks