Overview

overview

10

Static

static

3

NEAS.46aec...JC.exe

windows7-x64

10

NEAS.46aec...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.46aecbcd538e951cc2ac3bb2ba5f7060_JC.exe

  • Size

    204KB

  • Sample

    231102-wrk9rsfe64

  • MD5

    46aecbcd538e951cc2ac3bb2ba5f7060

  • SHA1

    7a1921bf87dc81608d5048ff147a3654cc7c7c9d

  • SHA256

    bf9326a1e67c2a7a0461d3461a0f5d7a5c6425736198f975fe746a6b930cc290

  • SHA512

    ae796af6cc9eadd999be78b8a1c73fdfc2a515804c1153265b5212ef96d71e73e1891d2a42cf450a8385a358823094e878e30a3d762dd126eeaf219813e8c9c1

  • SSDEEP

    3072:mmvW8t0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWVgj:B+e4QxL7B9W0c1RCzR/fSmluE

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      NEAS.46aecbcd538e951cc2ac3bb2ba5f7060_JC.exe

    • Size

      204KB

    • MD5

      46aecbcd538e951cc2ac3bb2ba5f7060

    • SHA1

      7a1921bf87dc81608d5048ff147a3654cc7c7c9d

    • SHA256

      bf9326a1e67c2a7a0461d3461a0f5d7a5c6425736198f975fe746a6b930cc290

    • SHA512

      ae796af6cc9eadd999be78b8a1c73fdfc2a515804c1153265b5212ef96d71e73e1891d2a42cf450a8385a358823094e878e30a3d762dd126eeaf219813e8c9c1

    • SSDEEP

      3072:mmvW8t0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWVgj:B+e4QxL7B9W0c1RCzR/fSmluE

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks