Overview

overview

10

Static

static

3

NEAS.c6346...80.exe

windows7-x64

10

NEAS.c6346...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.c63466d6cd5da2aaf20eb68ec7544780.exe

  • Size

    98KB

  • Sample

    231101-rm5emaff8t

  • MD5

    c63466d6cd5da2aaf20eb68ec7544780

  • SHA1

    531032a81549c95ba97f1b5290daf0fda14c2f4f

  • SHA256

    fda4bff748760d4a06b3055c9a34ba70a1308269b3ed38d97fe436d71e8d3d25

  • SHA512

    5ad634a3030d30523507c00cfe7a9aab6d768af449787addf6c17bc9ad014b8862667f6d5630860e9294bb28accf5c847537b7daa6e2787328ec9e8b8af20bf5

  • SSDEEP

    3072:NhvYu3jDCLLKedaG7EoeFKPD375lHzpa1P:Nhn33CLLPz7EoeYr75lHzpaF

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.c63466d6cd5da2aaf20eb68ec7544780.exe

    • Size

      98KB

    • MD5

      c63466d6cd5da2aaf20eb68ec7544780

    • SHA1

      531032a81549c95ba97f1b5290daf0fda14c2f4f

    • SHA256

      fda4bff748760d4a06b3055c9a34ba70a1308269b3ed38d97fe436d71e8d3d25

    • SHA512

      5ad634a3030d30523507c00cfe7a9aab6d768af449787addf6c17bc9ad014b8862667f6d5630860e9294bb28accf5c847537b7daa6e2787328ec9e8b8af20bf5

    • SSDEEP

      3072:NhvYu3jDCLLKedaG7EoeFKPD375lHzpa1P:Nhn33CLLPz7EoeYr75lHzpaF

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks