Overview

overview

10

Static

static

3

NEAS.3690b...50.exe

windows7-x64

10

NEAS.3690b...50.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.3690b7211297fdcc3493ee83c8e3f450.exe

  • Size

    355KB

  • Sample

    231103-pbfwsacc96

  • MD5

    3690b7211297fdcc3493ee83c8e3f450

  • SHA1

    4b92baef002c58cddf5b4b4d4a0f8c5876708725

  • SHA256

    20a01a3dba0656750dd564612945f512fc5aaf488fe8127ecd6de35084996265

  • SHA512

    e13993e26141dbf594bdec294f2605d9a0d1bcf38502cd82e1c66206b8eaf3e78971a38617ddb001e26468d03611cda08a547674747e3f6e76342b447df5f472

  • SSDEEP

    6144:43EmWPDNND9yRPzLq+YXFqaZiMLic9kzVd7EAC4TSs9EiS:DmWhND9yJz+b1FcMLmp2ATTSsdS

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.3690b7211297fdcc3493ee83c8e3f450.exe

    • Size

      355KB

    • MD5

      3690b7211297fdcc3493ee83c8e3f450

    • SHA1

      4b92baef002c58cddf5b4b4d4a0f8c5876708725

    • SHA256

      20a01a3dba0656750dd564612945f512fc5aaf488fe8127ecd6de35084996265

    • SHA512

      e13993e26141dbf594bdec294f2605d9a0d1bcf38502cd82e1c66206b8eaf3e78971a38617ddb001e26468d03611cda08a547674747e3f6e76342b447df5f472

    • SSDEEP

      6144:43EmWPDNND9yRPzLq+YXFqaZiMLic9kzVd7EAC4TSs9EiS:DmWhND9yJz+b1FcMLmp2ATTSsdS

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks