Overview

overview

10

Static

static

3

NEAS.dfa56...00.exe

windows7-x64

10

NEAS.dfa56...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.dfa56ba872ac8eb783d629e659ef4a00.exe

  • Size

    272KB

  • Sample

    231103-rg3c3sed72

  • MD5

    dfa56ba872ac8eb783d629e659ef4a00

  • SHA1

    b9d36d918452bc855f1d0a35f8b1b9a706105d21

  • SHA256

    29884a7338c855553c8e4beac0979ac1f79d11d35a4dcc0fb5ff5a09ef60ce2b

  • SHA512

    a2946ccddf6c65ff1c0600f9a70ff86dcd8b0a7b0b8bb1c6fd9a085f8922f47a4f8eeec392a3af1d072d7c0577330fd208b9577a9367250665c6411845f321f3

  • SSDEEP

    6144:nNbh/JByvZ6Mxv5Rar3O6B9fZSLhZmzbByvZ6Mxv5R:nNXByvNv54B9f01ZmHByvNv5

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.dfa56ba872ac8eb783d629e659ef4a00.exe

    • Size

      272KB

    • MD5

      dfa56ba872ac8eb783d629e659ef4a00

    • SHA1

      b9d36d918452bc855f1d0a35f8b1b9a706105d21

    • SHA256

      29884a7338c855553c8e4beac0979ac1f79d11d35a4dcc0fb5ff5a09ef60ce2b

    • SHA512

      a2946ccddf6c65ff1c0600f9a70ff86dcd8b0a7b0b8bb1c6fd9a085f8922f47a4f8eeec392a3af1d072d7c0577330fd208b9577a9367250665c6411845f321f3

    • SSDEEP

      6144:nNbh/JByvZ6Mxv5Rar3O6B9fZSLhZmzbByvZ6Mxv5R:nNXByvNv54B9f01ZmHByvNv5

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks