Overview

overview

10

Static

static

3

NEAS.0714d...f0.exe

windows7-x64

10

NEAS.0714d...f0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.0714deda33d4803724a047d508c82bf0.exe

  • Size

    204KB

  • Sample

    231102-xzhz2sga62

  • MD5

    0714deda33d4803724a047d508c82bf0

  • SHA1

    c748cac1fbe2afd9752c04a7575f9d6e25b78fc7

  • SHA256

    a963f8ac51b07c73d888f5d4005e5c77c73516a76b0c50b4dc37188613735e63

  • SHA512

    74d0a19af087fcda766a38c2b5a0da0ff406ffec94cefd9a28951d5f64e371a06bbe1b3572b2ec05e4cce75a460c71224249ca0e71295ba996b37a13b41b2006

  • SSDEEP

    1536:VO+OoZHo1vzxHwxrkKxNy3tQ9CW5EZWHakMwP9W6uXNh9h1AWa11GBPIdRONd+wW:RHo1ckq0tQ9nLHbB9WTk9+JgqmltDH

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      NEAS.0714deda33d4803724a047d508c82bf0.exe

    • Size

      204KB

    • MD5

      0714deda33d4803724a047d508c82bf0

    • SHA1

      c748cac1fbe2afd9752c04a7575f9d6e25b78fc7

    • SHA256

      a963f8ac51b07c73d888f5d4005e5c77c73516a76b0c50b4dc37188613735e63

    • SHA512

      74d0a19af087fcda766a38c2b5a0da0ff406ffec94cefd9a28951d5f64e371a06bbe1b3572b2ec05e4cce75a460c71224249ca0e71295ba996b37a13b41b2006

    • SSDEEP

      1536:VO+OoZHo1vzxHwxrkKxNy3tQ9CW5EZWHakMwP9W6uXNh9h1AWa11GBPIdRONd+wW:RHo1ckq0tQ9nLHbB9WTk9+JgqmltDH

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks