Overview

overview

9

Static

static

3

NEAS.4f4bf...80.exe

windows7-x64

9

NEAS.4f4bf...80.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.4f4bf19c15005254bf2e73cba34b5480.exe

  • Size

    216KB

  • Sample

    231101-rfrj7abg81

  • MD5

    4f4bf19c15005254bf2e73cba34b5480

  • SHA1

    d34473db5d5ff74fcf42aedaf52792552ccffa83

  • SHA256

    a7a654a85e114b9e4252e9eef8cd2f7193b32d27421917103d4f567a612e7b34

  • SHA512

    89eda9e2ead7d301fad5f45bc350c05b649517ddbefd54281796acd6115e0336840c2809bb694d43594c4e357aa5f7388eb2bb2fae1f610406d3b59e380dd690

  • SSDEEP

    3072:6e7Wpcm4HISSP4jgbEl4TWZFU6TcTSWEmOTcTSWEm0e7Wpcm4HISSP4jgbEl4TWl:Rqe6CgbEWToZQqe6CgbEWToZtQE

Score
9/10
ransomware

Malware Config

Targets

    • Target

      NEAS.4f4bf19c15005254bf2e73cba34b5480.exe

    • Size

      216KB

    • MD5

      4f4bf19c15005254bf2e73cba34b5480

    • SHA1

      d34473db5d5ff74fcf42aedaf52792552ccffa83

    • SHA256

      a7a654a85e114b9e4252e9eef8cd2f7193b32d27421917103d4f567a612e7b34

    • SHA512

      89eda9e2ead7d301fad5f45bc350c05b649517ddbefd54281796acd6115e0336840c2809bb694d43594c4e357aa5f7388eb2bb2fae1f610406d3b59e380dd690

    • SSDEEP

      3072:6e7Wpcm4HISSP4jgbEl4TWZFU6TcTSWEmOTcTSWEm0e7Wpcm4HISSP4jgbEl4TWl:Rqe6CgbEWToZQqe6CgbEWToZtQE

    Score
    9/10
    ransomware

    • Renames multiple (1554) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Renames multiple (262) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks