Overview

overview

10

Static

static

3

NEAS.2d9ca...18.exe

windows7-x64

10

NEAS.2d9ca...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.2d9ca877f58a2aa3dd77d2c10ce3dd18.exe

  • Size

    3.6MB

  • Sample

    231101-kcchjada2w

  • MD5

    2d9ca877f58a2aa3dd77d2c10ce3dd18

  • SHA1

    82168b7de80a62433ac8d7f76a5a1cdfe9ed1bfc

  • SHA256

    401c286afec222d8596c5e48b607093b2e63c5d26738a05991cb75e2d63eb50f

  • SHA512

    f0ab3e0ee12822383e0d87812585eca51968aecac99ae6a630239c354bbaef2ee09acda9fc018655a165796f284752435c71ec080fdabc4fa0078d3e82b8c20d

  • SSDEEP

    49152:OnbazR0vKLXZv91bazR0vKLXZ+bazR0vKLXZ7F+++i9:ObatuKLXZnatuKLXZqatuKLXZ

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.2d9ca877f58a2aa3dd77d2c10ce3dd18.exe

    • Size

      3.6MB

    • MD5

      2d9ca877f58a2aa3dd77d2c10ce3dd18

    • SHA1

      82168b7de80a62433ac8d7f76a5a1cdfe9ed1bfc

    • SHA256

      401c286afec222d8596c5e48b607093b2e63c5d26738a05991cb75e2d63eb50f

    • SHA512

      f0ab3e0ee12822383e0d87812585eca51968aecac99ae6a630239c354bbaef2ee09acda9fc018655a165796f284752435c71ec080fdabc4fa0078d3e82b8c20d

    • SSDEEP

      49152:OnbazR0vKLXZv91bazR0vKLXZ+bazR0vKLXZ7F+++i9:ObatuKLXZnatuKLXZqatuKLXZ

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks