Overview

overview

7

Static

static

3

NEAS.638c8...80.exe

windows7-x64

1

NEAS.638c8...80.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.638c870c29122cb27e0038203e3edd80.exe

  • Size

    119KB

  • Sample

    231102-jb9k7sah48

  • MD5

    638c870c29122cb27e0038203e3edd80

  • SHA1

    488ea42396c80ac87270ea69b8de540f3e195469

  • SHA256

    f9399bcd99481119c0096591e6c2c5a6dad2f16f57c630eaebf57f2493643c3a

  • SHA512

    697c07ac5479d119ebff685fa1c575d3ab68b8046c06b633aad861dde5b7c36b3c06aae670de02c3295c0e6be894224191e6165c6333a6c43a08b171fa1e7ca4

  • SSDEEP

    3072:OzHD2XMHBxHtu7o3VS9UQ8act2cMg9OERFNtrO7Y:Oz6RRi8ct2/EDrqY

Score
7/10
discovery

Malware Config

Targets

    • Target

      NEAS.638c870c29122cb27e0038203e3edd80.exe

    • Size

      119KB

    • MD5

      638c870c29122cb27e0038203e3edd80

    • SHA1

      488ea42396c80ac87270ea69b8de540f3e195469

    • SHA256

      f9399bcd99481119c0096591e6c2c5a6dad2f16f57c630eaebf57f2493643c3a

    • SHA512

      697c07ac5479d119ebff685fa1c575d3ab68b8046c06b633aad861dde5b7c36b3c06aae670de02c3295c0e6be894224191e6165c6333a6c43a08b171fa1e7ca4

    • SSDEEP

      3072:OzHD2XMHBxHtu7o3VS9UQ8act2cMg9OERFNtrO7Y:Oz6RRi8ct2/EDrqY

    Score
    7/10
    discovery

    • Deletes itself

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks