Overview

overview

10

Static

static

3

NEAS.eb8f0...00.exe

windows7-x64

10

NEAS.eb8f0...00.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.eb8f0dccf11f547c28e7b7336be10800.exe

  • Size

    182KB

  • Sample

    231101-rqdq3shb7z

  • MD5

    eb8f0dccf11f547c28e7b7336be10800

  • SHA1

    79c863a9a86c441bf2ec9ddf50b963e9d2b7a92e

  • SHA256

    0f991b8e71d86209533e53dea109efb17a1c358c362a28616b240a136d7f46bf

  • SHA512

    713249c6c754ef5a03aa77652c9baddade68d8e98a307e74fe7a0acb3a4298f22980448a8f569ceea4175f407401654d4bcaeb507a18f7030323f7fa3b792a87

  • SSDEEP

    3072:RzMI4P85plLBsLnVUUHyNwtN4/nEBlMdQCj/YKz7ECn53clLBsLnVUUHyNwtN4/G:exPaoUUHyN4lMdQCEKz7JdhUUHyN4lMS

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.eb8f0dccf11f547c28e7b7336be10800.exe

    • Size

      182KB

    • MD5

      eb8f0dccf11f547c28e7b7336be10800

    • SHA1

      79c863a9a86c441bf2ec9ddf50b963e9d2b7a92e

    • SHA256

      0f991b8e71d86209533e53dea109efb17a1c358c362a28616b240a136d7f46bf

    • SHA512

      713249c6c754ef5a03aa77652c9baddade68d8e98a307e74fe7a0acb3a4298f22980448a8f569ceea4175f407401654d4bcaeb507a18f7030323f7fa3b792a87

    • SSDEEP

      3072:RzMI4P85plLBsLnVUUHyNwtN4/nEBlMdQCj/YKz7ECn53clLBsLnVUUHyNwtN4/G:exPaoUUHyN4lMdQCEKz7JdhUUHyN4lMS

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks