Overview

overview

9

Static

static

1

NEAS.00eb8...c0.exe

windows7-x64

9

NEAS.00eb8...c0.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.00eb86b76b890582548e1cae511f42c0.exe

  • Size

    497KB

  • Sample

    231103-kn1phaeg91

  • MD5

    00eb86b76b890582548e1cae511f42c0

  • SHA1

    2d6f890f829f7878db36e738491effe99ddff13d

  • SHA256

    80f6f6b6279d6965c545c4378a6452796e32fddc3f801c7a9c3b88f88021862e

  • SHA512

    be08111e2ec8d33c932f6050d842e2acffe2e21fcae4be6e06b1f6a9342ff1803132e16d893b885a005c95f0821bc40e276e9c245af634a655aa697381335ec9

  • SSDEEP

    6144:4RZpRL7XsjcakSO2w1FiiVs0zmjkdtA5DMcCBPoFKWAdz5C93/msQlu1n0eQQUxS:4RvRLzGjzHw1jRET5zL3ZqxWJC/jA

Score
9/10
evasion

Malware Config

Targets

    • Target

      NEAS.00eb86b76b890582548e1cae511f42c0.exe

    • Size

      497KB

    • MD5

      00eb86b76b890582548e1cae511f42c0

    • SHA1

      2d6f890f829f7878db36e738491effe99ddff13d

    • SHA256

      80f6f6b6279d6965c545c4378a6452796e32fddc3f801c7a9c3b88f88021862e

    • SHA512

      be08111e2ec8d33c932f6050d842e2acffe2e21fcae4be6e06b1f6a9342ff1803132e16d893b885a005c95f0821bc40e276e9c245af634a655aa697381335ec9

    • SSDEEP

      6144:4RZpRL7XsjcakSO2w1FiiVs0zmjkdtA5DMcCBPoFKWAdz5C93/msQlu1n0eQQUxS:4RvRLzGjzHw1jRET5zL3ZqxWJC/jA

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks