Overview

overview

10

Static

static

3

NEAS.db93e...d1.exe

windows7-x64

10

NEAS.db93e...d1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.db93ed22176c5e523d97dd6cd11074d1.exe

  • Size

    432KB

  • Sample

    231101-kdg5eaff62

  • MD5

    db93ed22176c5e523d97dd6cd11074d1

  • SHA1

    66667387a9bfb08fda6b4a15f6702d925fcafe70

  • SHA256

    0f16a822a6f82ed5c909a0e9f799a8371ed322456306aeb7eb1cf4b3a34ecff5

  • SHA512

    dcadd0c40983f7c676a860d74c7adda7e11453f2fc2e2038cd36f65f5930a5dfe1dd4d33e2becc9c2686153b382ae4a86d359e0d531e79a0d72e6ba6c9883b34

  • SSDEEP

    12288:avqc/5cqA+nMri3i//OVLCoooooooooooooooooooooooooYKiUNl:PWVLw47

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.db93ed22176c5e523d97dd6cd11074d1.exe

    • Size

      432KB

    • MD5

      db93ed22176c5e523d97dd6cd11074d1

    • SHA1

      66667387a9bfb08fda6b4a15f6702d925fcafe70

    • SHA256

      0f16a822a6f82ed5c909a0e9f799a8371ed322456306aeb7eb1cf4b3a34ecff5

    • SHA512

      dcadd0c40983f7c676a860d74c7adda7e11453f2fc2e2038cd36f65f5930a5dfe1dd4d33e2becc9c2686153b382ae4a86d359e0d531e79a0d72e6ba6c9883b34

    • SSDEEP

      12288:avqc/5cqA+nMri3i//OVLCoooooooooooooooooooooooooYKiUNl:PWVLw47

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks