General

  • Target

    NEAS.126031559fb5d3f94de8d9e7039ad070_JC.exe

  • Size

    56KB

  • Sample

    231102-z1tjaahf56

  • MD5

    126031559fb5d3f94de8d9e7039ad070

  • SHA1

    1e89e092d1bda016b1bb0445ba9133d26e4f2096

  • SHA256

    b86c9000a72def1144387c0581011111a5f05889e34eafc9b88c3e6e3d626aab

  • SHA512

    3eeaeb4a346bef4a428936609a0a0fccd0f5bdeb637df89a1d8d70e6ac6811a62e67576b4885509c9e70012f1250f746ac3e52ae9458b5811c09d01e6220efe1

  • SSDEEP

    1536:i3MehJYvGW7tlXDI+XOd6iGwyIVckTNtXLL:i33EZ7PXDlXG6i+IV5tbL

Score
8/10

Malware Config

Targets

    • Target

      NEAS.126031559fb5d3f94de8d9e7039ad070_JC.exe

    • Size

      56KB

    • MD5

      126031559fb5d3f94de8d9e7039ad070

    • SHA1

      1e89e092d1bda016b1bb0445ba9133d26e4f2096

    • SHA256

      b86c9000a72def1144387c0581011111a5f05889e34eafc9b88c3e6e3d626aab

    • SHA512

      3eeaeb4a346bef4a428936609a0a0fccd0f5bdeb637df89a1d8d70e6ac6811a62e67576b4885509c9e70012f1250f746ac3e52ae9458b5811c09d01e6220efe1

    • SSDEEP

      1536:i3MehJYvGW7tlXDI+XOd6iGwyIVckTNtXLL:i33EZ7PXDlXG6i+IV5tbL

    Score
    8/10
    • Contacts a large (637) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Deletes itself

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks