Overview

overview

10

Static

static

3

NEAS.da8a3...60.exe

windows7-x64

10

NEAS.da8a3...60.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.da8a356f28d77f3caf509a5444f24860.exe

  • Size

    371KB

  • Sample

    231101-rpc36age3w

  • MD5

    da8a356f28d77f3caf509a5444f24860

  • SHA1

    86d36229a652b58178bfa5fe788d21c2c2072f8a

  • SHA256

    6158e63dfc88a8202faedc8398590ba52c1ce5093bcd4e4cafeb448c7501680f

  • SHA512

    56e7499119b3ac84830b7b86b5a88f80432a15d2719c309bcf795696676dd8831d694823549ce3613199abfb8aa9db9ecda86b64cf06f3776b88f108e4626a58

  • SSDEEP

    3072:FSm5QnSezJmcWR36CQe5UQWqTe3hbRdIu6dNeXZs+XBL+FhVukEB0pwGvJe2VTBK:MmUSwTQb6dN+NQs+RLOhSiix

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.da8a356f28d77f3caf509a5444f24860.exe

    • Size

      371KB

    • MD5

      da8a356f28d77f3caf509a5444f24860

    • SHA1

      86d36229a652b58178bfa5fe788d21c2c2072f8a

    • SHA256

      6158e63dfc88a8202faedc8398590ba52c1ce5093bcd4e4cafeb448c7501680f

    • SHA512

      56e7499119b3ac84830b7b86b5a88f80432a15d2719c309bcf795696676dd8831d694823549ce3613199abfb8aa9db9ecda86b64cf06f3776b88f108e4626a58

    • SSDEEP

      3072:FSm5QnSezJmcWR36CQe5UQWqTe3hbRdIu6dNeXZs+XBL+FhVukEB0pwGvJe2VTBK:MmUSwTQb6dN+NQs+RLOhSiix

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks