Overview

overview

8

Static

static

7

NEAS.02d71...JC.exe

windows7-x64

8

NEAS.02d71...JC.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.02d7186b977b4299a1afd2e431446ec0_JC.exe

  • Size

    76KB

  • Sample

    231102-htc5aagf8x

  • MD5

    02d7186b977b4299a1afd2e431446ec0

  • SHA1

    ce2bad5348e408fbae28c38136e5eecb3b4e7dea

  • SHA256

    25951250376b48e4ef012d876e1cbdf13dec84ddd7d4051c77e6647586432857

  • SHA512

    b330713c13b5ef592f27c85fff2dbdb2c3b7f51f8116cdeb862eace1b2c19bde272b3e4097f836b104d166c6102f8ad0a23e0a681662c3f3428b6dd182d7d74c

  • SSDEEP

    1536:Uvexs6pWGq6cjTArxtvRCLB6Px9+3cu9V+gKW:KcpWGqzjTALRCLB6ZAs+VBKW

Score
8/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      NEAS.02d7186b977b4299a1afd2e431446ec0_JC.exe

    • Size

      76KB

    • MD5

      02d7186b977b4299a1afd2e431446ec0

    • SHA1

      ce2bad5348e408fbae28c38136e5eecb3b4e7dea

    • SHA256

      25951250376b48e4ef012d876e1cbdf13dec84ddd7d4051c77e6647586432857

    • SHA512

      b330713c13b5ef592f27c85fff2dbdb2c3b7f51f8116cdeb862eace1b2c19bde272b3e4097f836b104d166c6102f8ad0a23e0a681662c3f3428b6dd182d7d74c

    • SSDEEP

      1536:Uvexs6pWGq6cjTArxtvRCLB6Px9+3cu9V+gKW:KcpWGqzjTALRCLB6ZAs+VBKW

    Score
    8/10
    persistencespywarestealerupx

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops desktop.ini file(s)

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks