Overview

overview

10

Static

static

3

NEAS.3ed10...JC.exe

windows7-x64

10

NEAS.3ed10...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.3ed1087b9cd85db76616d928ea709f20_JC.exe

  • Size

    211KB

  • Sample

    231101-3gyknsec6v

  • MD5

    3ed1087b9cd85db76616d928ea709f20

  • SHA1

    4ebaf4007c26b24f8af202e3405e67bfdef1b7a8

  • SHA256

    45d0b5a10a0f005d3a4d9c42c5c694283c2bbedb54eca33de45ea7ed362d9a34

  • SHA512

    55641a5468ab08a2bfc1f850b77e64049ba3fe7ea848910074343141182672f6f432bb8518bad08bd98faa8bf83e2577b37f072d9d933d0176d12e4fcc298f3c

  • SSDEEP

    3072:WD6Xtx68yygRBE52mxkEOHLRMpZ4deth8PEAjAfIbAYGPhz6sPJBInxZqOX:Wh8cBzHLRMpZ4d1ZX

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      NEAS.3ed1087b9cd85db76616d928ea709f20_JC.exe

    • Size

      211KB

    • MD5

      3ed1087b9cd85db76616d928ea709f20

    • SHA1

      4ebaf4007c26b24f8af202e3405e67bfdef1b7a8

    • SHA256

      45d0b5a10a0f005d3a4d9c42c5c694283c2bbedb54eca33de45ea7ed362d9a34

    • SHA512

      55641a5468ab08a2bfc1f850b77e64049ba3fe7ea848910074343141182672f6f432bb8518bad08bd98faa8bf83e2577b37f072d9d933d0176d12e4fcc298f3c

    • SSDEEP

      3072:WD6Xtx68yygRBE52mxkEOHLRMpZ4deth8PEAjAfIbAYGPhz6sPJBInxZqOX:Wh8cBzHLRMpZ4d1ZX

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks