Overview

overview

7

Static

static

1

NEAS.6201d...JC.exe

windows7-x64

7

NEAS.6201d...JC.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.6201df8d5fa568784957a7093dc2c1e0_JC.exe

  • Size

    12KB

  • Sample

    231101-zpekzsdb2s

  • MD5

    6201df8d5fa568784957a7093dc2c1e0

  • SHA1

    24291330e4ec3a21299ba0e45636a296581e2834

  • SHA256

    9c7dbcd40be9ee537b1b65886404d78a1d07cc5d047e24966c609e4ef3f2f772

  • SHA512

    fa95898bddd8756743b681b6917e991c72ffa83a39d0df34fc25c13cfd251f1213062e048fb1b9626e352c5a2af71a262b3893561811315f30ee96d905559518

  • SSDEEP

    384:uL7li/2z8q2DcEQvdhcJKLTp/NK9xaCp:4IM/Q9cCp

Score
7/10

Malware Config

Targets

    • Target

      NEAS.6201df8d5fa568784957a7093dc2c1e0_JC.exe

    • Size

      12KB

    • MD5

      6201df8d5fa568784957a7093dc2c1e0

    • SHA1

      24291330e4ec3a21299ba0e45636a296581e2834

    • SHA256

      9c7dbcd40be9ee537b1b65886404d78a1d07cc5d047e24966c609e4ef3f2f772

    • SHA512

      fa95898bddd8756743b681b6917e991c72ffa83a39d0df34fc25c13cfd251f1213062e048fb1b9626e352c5a2af71a262b3893561811315f30ee96d905559518

    • SSDEEP

      384:uL7li/2z8q2DcEQvdhcJKLTp/NK9xaCp:4IM/Q9cCp

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks