Overview

overview

10

Static

static

7

NEAS.154e3...JC.exe

windows7-x64

10

NEAS.154e3...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.154e31945d2bd09fd27266ad870c3ef0_JC.exe

  • Size

    160KB

  • Sample

    231103-rhphlsed94

  • MD5

    154e31945d2bd09fd27266ad870c3ef0

  • SHA1

    07d51afe1841d3aa69aebb48cec1d30055da787b

  • SHA256

    15d4a485aca08a170ac2495253788b5ed5bb5915674f0e48938cd21b0201fe4d

  • SHA512

    3e61d16e265eefe8366f8fbe1afe984a8ba07fb621dea2e34c0dbd326d4db3a1e71bfa6e5dd53d1d4afa2576ecabd56f601936c861091fda863b4fd2595ee769

  • SSDEEP

    1536:uuQRyle0Y9WV32pauUIgVHyPuWU0ucXDveteBM2mlmo7pd5QMKA:FQMle0wQ32QuxAHyPuWUpcS4cd5QMKA

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      NEAS.154e31945d2bd09fd27266ad870c3ef0_JC.exe

    • Size

      160KB

    • MD5

      154e31945d2bd09fd27266ad870c3ef0

    • SHA1

      07d51afe1841d3aa69aebb48cec1d30055da787b

    • SHA256

      15d4a485aca08a170ac2495253788b5ed5bb5915674f0e48938cd21b0201fe4d

    • SHA512

      3e61d16e265eefe8366f8fbe1afe984a8ba07fb621dea2e34c0dbd326d4db3a1e71bfa6e5dd53d1d4afa2576ecabd56f601936c861091fda863b4fd2595ee769

    • SSDEEP

      1536:uuQRyle0Y9WV32pauUIgVHyPuWU0ucXDveteBM2mlmo7pd5QMKA:FQMle0wQ32QuxAHyPuWUpcS4cd5QMKA

    Score
    10/10
    evasionpersistencetrojanupx

    • Windows security bypass

      evasiontrojan

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks