General

  • Target

    NEAS.5532cedfcc93e170f1fa8f89dae99d50_JC.exe

  • Size

    2.0MB

  • Sample

    231103-y2xrnahg9s

  • MD5

    5532cedfcc93e170f1fa8f89dae99d50

  • SHA1

    27ba738d613d0b7c56c3121c49530ebd6e7d3991

  • SHA256

    f1436070cb23e096c98b4c18088d8020208eb63f439bcac4c6721dcabfa3a60b

  • SHA512

    66213be0a706d528fcf5e572492304de4d6532d78d544b8dc05dd2eafd7452f8022cf57c5a89a82215195c2208fa0a1071462a0c90a89e447ee3b5971ec597bf

  • SSDEEP

    49152:oRBKILo69MFGQ7ai7D3xTgOxYwpKWbazR0vKLXZ:a0ILo69MFD2i7D3xkOxYwpKiatuKLXZ

Score
7/10
upx

Malware Config

Targets

    • Target

      NEAS.5532cedfcc93e170f1fa8f89dae99d50_JC.exe

    • Size

      2.0MB

    • MD5

      5532cedfcc93e170f1fa8f89dae99d50

    • SHA1

      27ba738d613d0b7c56c3121c49530ebd6e7d3991

    • SHA256

      f1436070cb23e096c98b4c18088d8020208eb63f439bcac4c6721dcabfa3a60b

    • SHA512

      66213be0a706d528fcf5e572492304de4d6532d78d544b8dc05dd2eafd7452f8022cf57c5a89a82215195c2208fa0a1071462a0c90a89e447ee3b5971ec597bf

    • SSDEEP

      49152:oRBKILo69MFGQ7ai7D3xTgOxYwpKWbazR0vKLXZ:a0ILo69MFD2i7D3xkOxYwpKiatuKLXZ

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks