Overview

overview

10

Static

static

3

NEAS.de702...JC.exe

windows7-x64

10

NEAS.de702...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.de702e8032230293fa87c6327a4f07a0_JC.exe

  • Size

    790KB

  • Sample

    231103-rheneaed79

  • MD5

    de702e8032230293fa87c6327a4f07a0

  • SHA1

    d2e5201744ba9de46d9dbd28479e713fa732261f

  • SHA256

    2e819b41738a2469d5d5898eed680cd2c0e6318aa6b35ae2689b9532e15df6dd

  • SHA512

    d4f1df8433fce62d2ad5950dd5144e93f552cf41b6550cba14525ed9ee85ce0fb2d0b0a0c97a38ba8f122dd5e0551449cb5197485f5c2aacb5fb2f47401afc3c

  • SSDEEP

    12288:Ypl/yjKFB24lwR45FB24lJ87g7/VycgE81lgxaa79y:EkCPLPEoIlg17o

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.de702e8032230293fa87c6327a4f07a0_JC.exe

    • Size

      790KB

    • MD5

      de702e8032230293fa87c6327a4f07a0

    • SHA1

      d2e5201744ba9de46d9dbd28479e713fa732261f

    • SHA256

      2e819b41738a2469d5d5898eed680cd2c0e6318aa6b35ae2689b9532e15df6dd

    • SHA512

      d4f1df8433fce62d2ad5950dd5144e93f552cf41b6550cba14525ed9ee85ce0fb2d0b0a0c97a38ba8f122dd5e0551449cb5197485f5c2aacb5fb2f47401afc3c

    • SSDEEP

      12288:Ypl/yjKFB24lwR45FB24lJ87g7/VycgE81lgxaa79y:EkCPLPEoIlg17o

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks