Overview

overview

7

Static

static

3

NEAS.b40c9...40.exe

windows7-x64

7

NEAS.b40c9...40.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.b40c98b99d3697904b572331ba841d40.exe

  • Size

    85KB

  • Sample

    231101-rl28wagf33

  • MD5

    b40c98b99d3697904b572331ba841d40

  • SHA1

    d63a4dc2f5ca32e26c7b0e7029cde8d90d6a76cd

  • SHA256

    ae0bf7cd845f1daa9fe742d17fc7a3ccabc6049f660f1afa06d007ab4fa9229b

  • SHA512

    f8d99459eeb9602c51bd16755ea74824d8a66d83de6625b61486267553de33c2f3addd0e516d01bdcb24f167c83f0494039d2d48df6bdd86f6c035e62310b95d

  • SSDEEP

    1536:D00URPnKfZrT2DawRR8JfP39XZB355B/CYTjipvF2a:D00URSfsGyREXZB355BqYvQd2a

Score
7/10
persistence

Malware Config

Targets

    • Target

      NEAS.b40c98b99d3697904b572331ba841d40.exe

    • Size

      85KB

    • MD5

      b40c98b99d3697904b572331ba841d40

    • SHA1

      d63a4dc2f5ca32e26c7b0e7029cde8d90d6a76cd

    • SHA256

      ae0bf7cd845f1daa9fe742d17fc7a3ccabc6049f660f1afa06d007ab4fa9229b

    • SHA512

      f8d99459eeb9602c51bd16755ea74824d8a66d83de6625b61486267553de33c2f3addd0e516d01bdcb24f167c83f0494039d2d48df6bdd86f6c035e62310b95d

    • SSDEEP

      1536:D00URPnKfZrT2DawRR8JfP39XZB355B/CYTjipvF2a:D00URSfsGyREXZB355BqYvQd2a

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks