Overview

overview

10

Static

static

3

NEAS.ecf03...JC.exe

windows7-x64

10

NEAS.ecf03...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.ecf036a9505084ad8dc3e4ae22858c50_JC.exe

  • Size

    237KB

  • Sample

    231101-ph1vjaaa79

  • MD5

    ecf036a9505084ad8dc3e4ae22858c50

  • SHA1

    d430adcb893557aa961c6fd8275a3796c33d2006

  • SHA256

    676d70c9825742ec998f4e083035d60cec94a99a9237f41e20000b15234117b3

  • SHA512

    6d0fe22e7a2b0d3da4183cc48f0d290f9f24139c1ab39efd102325c1bc4cfb88f80624287afd335bbe3bf924b3ceba874dbc290411151e68325b5fbef663d1b3

  • SSDEEP

    3072:Ccu+6f/nBQlAiSYrVmucLAUbj8Nq75Sq4iqnAUUjE02ZoL9snKKq:C/RrHYrGLXj8U5ihYjEToZY8

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.ecf036a9505084ad8dc3e4ae22858c50_JC.exe

    • Size

      237KB

    • MD5

      ecf036a9505084ad8dc3e4ae22858c50

    • SHA1

      d430adcb893557aa961c6fd8275a3796c33d2006

    • SHA256

      676d70c9825742ec998f4e083035d60cec94a99a9237f41e20000b15234117b3

    • SHA512

      6d0fe22e7a2b0d3da4183cc48f0d290f9f24139c1ab39efd102325c1bc4cfb88f80624287afd335bbe3bf924b3ceba874dbc290411151e68325b5fbef663d1b3

    • SSDEEP

      3072:Ccu+6f/nBQlAiSYrVmucLAUbj8Nq75Sq4iqnAUUjE02ZoL9snKKq:C/RrHYrGLXj8U5ihYjEToZY8

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks