Overview

overview

8

Static

static

3

NEAS.1213a...f0.exe

windows7-x64

1

NEAS.1213a...f0.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.1213aa001fbb4fc6a1a7743068381df0.exe

  • Size

    119KB

  • Sample

    231101-q667wshg8w

  • MD5

    1213aa001fbb4fc6a1a7743068381df0

  • SHA1

    a1e5158b04a1defdbafef972cff445e6f5523a9a

  • SHA256

    764d9531aa597fe18c691d95422a78ee84ae5facf475c6982feb819a82c2b4f7

  • SHA512

    d2ede785d869aa9e6cdc9a8d041dbb0ea0e50e763e90b71c6e80375edadc7f1ef7075f98a0bd15fbd754db5c2ac0ab1c9c13631e365ffcc12fdda47664e6a059

  • SSDEEP

    3072:Ormds8UR/y5qP0IwbtAN6oLo3kkh6dlykCE4jmj5:Ormy8UZy5qcI2tA46QklCEqmj5

Score
8/10
discovery

Malware Config

Targets

    • Target

      NEAS.1213aa001fbb4fc6a1a7743068381df0.exe

    • Size

      119KB

    • MD5

      1213aa001fbb4fc6a1a7743068381df0

    • SHA1

      a1e5158b04a1defdbafef972cff445e6f5523a9a

    • SHA256

      764d9531aa597fe18c691d95422a78ee84ae5facf475c6982feb819a82c2b4f7

    • SHA512

      d2ede785d869aa9e6cdc9a8d041dbb0ea0e50e763e90b71c6e80375edadc7f1ef7075f98a0bd15fbd754db5c2ac0ab1c9c13631e365ffcc12fdda47664e6a059

    • SSDEEP

      3072:Ormds8UR/y5qP0IwbtAN6oLo3kkh6dlykCE4jmj5:Ormy8UZy5qcI2tA46QklCEqmj5

    Score
    8/10
    discovery

    • Contacts a large (639) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Deletes itself

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks