Overview

overview

10

Static

static

3

NEAS.9650c...50.exe

windows7-x64

10

NEAS.9650c...50.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.9650c79f12da0a4911cf6eaca256be50.exe

  • Size

    1.5MB

  • Sample

    231101-bayhjsgc7v

  • MD5

    9650c79f12da0a4911cf6eaca256be50

  • SHA1

    84e9defc03c9f2e19a1ca594bfd58d0f518a1810

  • SHA256

    22aee8012893e82149d396b6c153a0565ab524c3bc7ee05216c007635ea5136f

  • SHA512

    4b86e46147d420f6ee775d5f5c2973710082a63c57e2229c5af26a5538739b0d56718c6aa13b6b3fc4b1c7b63a0c4925f4764c3e62be2448e3ff21a5f72a7a4d

  • SSDEEP

    12288:xwZ1PbWGRdA6sQxuEuZH8WF50+OJ3BHCXwpnsKvNA+XTvZHWuEo3oWB+:mzecI50+YNpsKv2EvZHp3oWB+

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.9650c79f12da0a4911cf6eaca256be50.exe

    • Size

      1.5MB

    • MD5

      9650c79f12da0a4911cf6eaca256be50

    • SHA1

      84e9defc03c9f2e19a1ca594bfd58d0f518a1810

    • SHA256

      22aee8012893e82149d396b6c153a0565ab524c3bc7ee05216c007635ea5136f

    • SHA512

      4b86e46147d420f6ee775d5f5c2973710082a63c57e2229c5af26a5538739b0d56718c6aa13b6b3fc4b1c7b63a0c4925f4764c3e62be2448e3ff21a5f72a7a4d

    • SSDEEP

      12288:xwZ1PbWGRdA6sQxuEuZH8WF50+OJ3BHCXwpnsKvNA+XTvZHWuEo3oWB+:mzecI50+YNpsKv2EvZHp3oWB+

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks