Overview

overview

10

Static

static

3

NEAS.f497e...b0.exe

windows7-x64

10

NEAS.f497e...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f497e981ed383c09b2fdaef1556f1bb0.exe

  • Size

    430KB

  • Sample

    231101-c1x55shc5w

  • MD5

    f497e981ed383c09b2fdaef1556f1bb0

  • SHA1

    dc1a3080593d15ef2c7cb4dbb8340fc1cdc4650d

  • SHA256

    2179c9adaa6f492524eceb86ae329ff611838a1944a65485ced44e34a47c3400

  • SHA512

    e403744869574e34b3763c4932d81a26a948bc3a10d4498969bac668391b7a9f1ed27fa0c4a3fd059439d8c9602ff103d5a891ae0b66766d2fb8633f7baf9452

  • SSDEEP

    6144:h3BDZ7LJNaRs+HLlD0rN2ZwVht740Psz:nDJuHpoxso

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.f497e981ed383c09b2fdaef1556f1bb0.exe

    • Size

      430KB

    • MD5

      f497e981ed383c09b2fdaef1556f1bb0

    • SHA1

      dc1a3080593d15ef2c7cb4dbb8340fc1cdc4650d

    • SHA256

      2179c9adaa6f492524eceb86ae329ff611838a1944a65485ced44e34a47c3400

    • SHA512

      e403744869574e34b3763c4932d81a26a948bc3a10d4498969bac668391b7a9f1ed27fa0c4a3fd059439d8c9602ff103d5a891ae0b66766d2fb8633f7baf9452

    • SSDEEP

      6144:h3BDZ7LJNaRs+HLlD0rN2ZwVht740Psz:nDJuHpoxso

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks