Overview

overview

10

Static

static

3

NEAS.d0d9b...98.exe

windows7-x64

10

NEAS.d0d9b...98.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d0d9bb8b5556ba0ba707c8e6d3f50998.exe

  • Size

    265KB

  • Sample

    231101-kdb86aff23

  • MD5

    d0d9bb8b5556ba0ba707c8e6d3f50998

  • SHA1

    ce701ff4fe44036cee205330200a1ff918429827

  • SHA256

    e3ea2f73976e84005c51877055d878020a674fab93e3bb2e1ba4c2f7770a10d9

  • SHA512

    ef6f842ef9a407b8d8fa503ba90c9062ec2ae7b8b3e1097fd1fb3fb57cfc7952526606849ed5649971d64aa417b096e4686fef1b3d11ffdca33ee8f790ecd172

  • SSDEEP

    6144:6v4Q64CbkqcGJlF84U6moEx6pVYgTS/QiFs2QidpqDcSzjb:6v4d4C3cMXU7ufiq1zj

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.d0d9bb8b5556ba0ba707c8e6d3f50998.exe

    • Size

      265KB

    • MD5

      d0d9bb8b5556ba0ba707c8e6d3f50998

    • SHA1

      ce701ff4fe44036cee205330200a1ff918429827

    • SHA256

      e3ea2f73976e84005c51877055d878020a674fab93e3bb2e1ba4c2f7770a10d9

    • SHA512

      ef6f842ef9a407b8d8fa503ba90c9062ec2ae7b8b3e1097fd1fb3fb57cfc7952526606849ed5649971d64aa417b096e4686fef1b3d11ffdca33ee8f790ecd172

    • SSDEEP

      6144:6v4Q64CbkqcGJlF84U6moEx6pVYgTS/QiFs2QidpqDcSzjb:6v4d4C3cMXU7ufiq1zj

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks