Overview

overview

10

Static

static

1

NEAS.da17f...JC.exe

windows7-x64

10

NEAS.da17f...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.da17f83d947f741ec61df2a41182b1d0_JC.exe

  • Size

    209KB

  • Sample

    231102-tedytagd86

  • MD5

    da17f83d947f741ec61df2a41182b1d0

  • SHA1

    c62ed6ecf822fa1cbd194577b644fcaa4129d34e

  • SHA256

    aa723f86bd0a2ba235b7422e8956ec88a6b0eb389d43e919875253b9e0465d52

  • SHA512

    478f82cab4cc9a7be3f9bc05daab88f41355ac485bef702ee6ce6470871677ad55ada018b675590caa0e3925940b0b59390a5d2d683777d0ce7393cfad003ccb

  • SSDEEP

    3072:rQcjk9tVRNIcjb4Ryfjijjx14hdeCXHKPJFo9zpE7Di0X0JuLL+o7BlpF9e:rQh9tVRm2kh34hdeCkcG7DEALLlnN

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      NEAS.da17f83d947f741ec61df2a41182b1d0_JC.exe

    • Size

      209KB

    • MD5

      da17f83d947f741ec61df2a41182b1d0

    • SHA1

      c62ed6ecf822fa1cbd194577b644fcaa4129d34e

    • SHA256

      aa723f86bd0a2ba235b7422e8956ec88a6b0eb389d43e919875253b9e0465d52

    • SHA512

      478f82cab4cc9a7be3f9bc05daab88f41355ac485bef702ee6ce6470871677ad55ada018b675590caa0e3925940b0b59390a5d2d683777d0ce7393cfad003ccb

    • SSDEEP

      3072:rQcjk9tVRNIcjb4Ryfjijjx14hdeCXHKPJFo9zpE7Di0X0JuLL+o7BlpF9e:rQh9tVRm2kh34hdeCkcG7DEALLlnN

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks