Overview

overview

10

Static

static

3

NEAS.c89fa...f0.exe

windows7-x64

10

NEAS.c89fa...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.c89fa5aa6d424155b4ba0e120f5643f0.exe

  • Size

    451KB

  • Sample

    231101-rnaxeahd39

  • MD5

    c89fa5aa6d424155b4ba0e120f5643f0

  • SHA1

    0f2baae2b9be8bfa6ebebdb9575aea2f5243430b

  • SHA256

    d5a5f8c86211cc9abe9e51f91f44d582c4785bd661436e3cc7fb27b54c671921

  • SHA512

    cc3253c786b893565b42dd00f0718b797a448bad9d440b8b3a1c61f63ffe754730509d2400bbc4365d6dddc4a80294b75d93dad2bb87039d7c6a9d19f1ee2945

  • SSDEEP

    6144:UDoJPQ///NR5fLYG3eujPQ///NR5fqZo4tjS6Y:UP/NcZ7/NC64tm6Y

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.c89fa5aa6d424155b4ba0e120f5643f0.exe

    • Size

      451KB

    • MD5

      c89fa5aa6d424155b4ba0e120f5643f0

    • SHA1

      0f2baae2b9be8bfa6ebebdb9575aea2f5243430b

    • SHA256

      d5a5f8c86211cc9abe9e51f91f44d582c4785bd661436e3cc7fb27b54c671921

    • SHA512

      cc3253c786b893565b42dd00f0718b797a448bad9d440b8b3a1c61f63ffe754730509d2400bbc4365d6dddc4a80294b75d93dad2bb87039d7c6a9d19f1ee2945

    • SSDEEP

      6144:UDoJPQ///NR5fLYG3eujPQ///NR5fqZo4tjS6Y:UP/NcZ7/NC64tm6Y

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks