Overview

overview

10

Static

static

7

NEAS.b9106...b0.exe

windows7-x64

10

NEAS.b9106...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.b910660ee04793df67e26cfe32dfa6b0.exe

  • Size

    19KB

  • Sample

    231101-rmeh7sfb4v

  • MD5

    b910660ee04793df67e26cfe32dfa6b0

  • SHA1

    1e3fdb1388eb892d9ba19c71dad37e09f10f0005

  • SHA256

    7ed2c1f04bf5501f1e3804c8f86d00dca4787a93e5ca1a85675d85bd227a8e2e

  • SHA512

    600e42d8b1cf76984906d4f56a3c7b3a02433e01540dfd6194d8c173a3c22dfb52455392461075767c00bcbe8afe63a677feeed7ea17ecdb977c44a0d4890576

  • SSDEEP

    384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvXwLd:rRkiLw3HsDSARGG/ALd

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      NEAS.b910660ee04793df67e26cfe32dfa6b0.exe

    • Size

      19KB

    • MD5

      b910660ee04793df67e26cfe32dfa6b0

    • SHA1

      1e3fdb1388eb892d9ba19c71dad37e09f10f0005

    • SHA256

      7ed2c1f04bf5501f1e3804c8f86d00dca4787a93e5ca1a85675d85bd227a8e2e

    • SHA512

      600e42d8b1cf76984906d4f56a3c7b3a02433e01540dfd6194d8c173a3c22dfb52455392461075767c00bcbe8afe63a677feeed7ea17ecdb977c44a0d4890576

    • SSDEEP

      384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvXwLd:rRkiLw3HsDSARGG/ALd

    Score
    10/10
    evasionpersistencetrojanupx

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks