Overview

overview

10

Static

static

3

NEAS.f933f...50.exe

windows7-x64

10

NEAS.f933f...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f933f1cb39ac1302ebb4d000a1245e50.exe

  • Size

    145KB

  • Sample

    231102-pby3csbe8z

  • MD5

    f933f1cb39ac1302ebb4d000a1245e50

  • SHA1

    5a5eafa6cbd6b74eca01cfd6cdb0e04f82649215

  • SHA256

    d998e7a025ab0d3793e6805b4fe9dc66535e6bc0c6e856755f0342c1e8894baf

  • SHA512

    3714c8445e064b435bf78f3d03e3f4c374853933c374998103c3457c28b1c0605f37f43fe47b10181a1a416e474a73928adffb8ede88834b67a7b59ac678b0ae

  • SSDEEP

    3072:blSa4nmX4iJFOkktaBUfClil9ifUGkqrifbdB7dYk1Bx8DpsV64:bcbmNXktahlY1Gkym/89b4

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.f933f1cb39ac1302ebb4d000a1245e50.exe

    • Size

      145KB

    • MD5

      f933f1cb39ac1302ebb4d000a1245e50

    • SHA1

      5a5eafa6cbd6b74eca01cfd6cdb0e04f82649215

    • SHA256

      d998e7a025ab0d3793e6805b4fe9dc66535e6bc0c6e856755f0342c1e8894baf

    • SHA512

      3714c8445e064b435bf78f3d03e3f4c374853933c374998103c3457c28b1c0605f37f43fe47b10181a1a416e474a73928adffb8ede88834b67a7b59ac678b0ae

    • SSDEEP

      3072:blSa4nmX4iJFOkktaBUfClil9ifUGkqrifbdB7dYk1Bx8DpsV64:bcbmNXktahlY1Gkym/89b4

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks