Overview

overview

10

Static

static

3

NEAS.ab81a...b8.exe

windows7-x64

10

NEAS.ab81a...b8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.ab81a88a5d74c218288607c8386714b8.exe

  • Size

    117KB

  • Sample

    231101-kc2sesdd3t

  • MD5

    ab81a88a5d74c218288607c8386714b8

  • SHA1

    124d91544d3a9546d73c6a2f2b2f7329ee6bfc28

  • SHA256

    7a595be6de115ed703f7087745c2d1703c162b589eaac0b9182fad948d42c76e

  • SHA512

    560365d39840f43e0d11302376bc2593d6b8d77797b2bdb83ac468b247ce912cac8d9a961c635e9e9496eacbbcd731915ee4fa179140031dc0b4603c0f0126fe

  • SSDEEP

    1536:5TBCenYFACpyNlzf/MesbGsC0L7PEdxHJWjvFFfUN1Avhw6JCM:jAOYyNl/wBC0Lj64vFFfUrQlM

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.ab81a88a5d74c218288607c8386714b8.exe

    • Size

      117KB

    • MD5

      ab81a88a5d74c218288607c8386714b8

    • SHA1

      124d91544d3a9546d73c6a2f2b2f7329ee6bfc28

    • SHA256

      7a595be6de115ed703f7087745c2d1703c162b589eaac0b9182fad948d42c76e

    • SHA512

      560365d39840f43e0d11302376bc2593d6b8d77797b2bdb83ac468b247ce912cac8d9a961c635e9e9496eacbbcd731915ee4fa179140031dc0b4603c0f0126fe

    • SSDEEP

      1536:5TBCenYFACpyNlzf/MesbGsC0L7PEdxHJWjvFFfUN1Avhw6JCM:jAOYyNl/wBC0Lj64vFFfUrQlM

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks