Overview

overview

10

Static

static

3

NEAS.c0579...e0.exe

windows7-x64

10

NEAS.c0579...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.c05796193c24c94a4121e3701a5a9be0.exe

  • Size

    80KB

  • Sample

    231101-rmsqtsha83

  • MD5

    c05796193c24c94a4121e3701a5a9be0

  • SHA1

    f65871c9bbe838a6fb87f39f7fe41a0d78947ef2

  • SHA256

    9c701def51d2c679d23b8412f132abf6e02c88f1cb688aa06cf6174b0b09a1c0

  • SHA512

    2a10f86945171c8426398b55807403d4b0d040f8c3b7130a66c51aa79fab615dd8f859b32592441ac9c53762044751d60d808104ccf6d98a244fbc1853be0121

  • SSDEEP

    1536:LP//sUkcqPPNnfCPTwgVNzTrHWozDfWqdMVrlEFtyb7IYOOqw4Tv:L/sUkcuPNnfgHHWozTWqAhELy1MTTv

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.c05796193c24c94a4121e3701a5a9be0.exe

    • Size

      80KB

    • MD5

      c05796193c24c94a4121e3701a5a9be0

    • SHA1

      f65871c9bbe838a6fb87f39f7fe41a0d78947ef2

    • SHA256

      9c701def51d2c679d23b8412f132abf6e02c88f1cb688aa06cf6174b0b09a1c0

    • SHA512

      2a10f86945171c8426398b55807403d4b0d040f8c3b7130a66c51aa79fab615dd8f859b32592441ac9c53762044751d60d808104ccf6d98a244fbc1853be0121

    • SSDEEP

      1536:LP//sUkcqPPNnfCPTwgVNzTrHWozDfWqdMVrlEFtyb7IYOOqw4Tv:L/sUkcuPNnfgHHWozTWqAhELy1MTTv

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks