Overview

overview

10

Static

static

3

NEAS.f0e1f...20.exe

windows7-x64

10

NEAS.f0e1f...20.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.f0e1f0c35573b3add5720efc27538220.exe

  • Size

    385KB

  • Sample

    231102-vdmd8sea57

  • MD5

    f0e1f0c35573b3add5720efc27538220

  • SHA1

    af6de906a21e3cea7320b4d6bc2ff1b6836986fa

  • SHA256

    f4650c1342405216b157dd5cda55005b467efd37725702fe6488157b4a441fef

  • SHA512

    c2bb7c4eb89c771b09b7a62db35d324a12b689aa8fc9e752607be01321028bec8ee4db8bc0576811f80acc4d89d21f4b07f9589d6f1feff8bfa9f007c32564a1

  • SSDEEP

    12288:IJCy59SLWy5jy59SL3y59Ey59SLAy59SLZy5iy59SL:8Cy7oWypy7o3y7Ey7oAy7oZyUy7o

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.f0e1f0c35573b3add5720efc27538220.exe

    • Size

      385KB

    • MD5

      f0e1f0c35573b3add5720efc27538220

    • SHA1

      af6de906a21e3cea7320b4d6bc2ff1b6836986fa

    • SHA256

      f4650c1342405216b157dd5cda55005b467efd37725702fe6488157b4a441fef

    • SHA512

      c2bb7c4eb89c771b09b7a62db35d324a12b689aa8fc9e752607be01321028bec8ee4db8bc0576811f80acc4d89d21f4b07f9589d6f1feff8bfa9f007c32564a1

    • SSDEEP

      12288:IJCy59SLWy5jy59SL3y59Ey59SLAy59SLZy5iy59SL:8Cy7oWypy7o3y7Ey7oAy7oZyUy7o

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks