Overview

overview

7

Static

static

3

NEAS.338aa...30.exe

windows7-x64

7

NEAS.338aa...30.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.338aa66d2aee230d66b6cbc16fc6a930.exe

  • Size

    310KB

  • Sample

    231104-kms82aeb4v

  • MD5

    338aa66d2aee230d66b6cbc16fc6a930

  • SHA1

    5d4564c50a7c6892dc2562ddcd8af53b44774cd5

  • SHA256

    9c24b2573a43c06b6d325d7bc935ac482db033d6d6662a584642ac40583c5781

  • SHA512

    3c823d57d0dbf64fc7cfa7075ee5ab7e147a0340baed07a803342accd6515824dce8fbd7bb522aed0f95aae4c8cdeaf3ded408ee06c7da0c3eb2ad9ab003c948

  • SSDEEP

    6144:kBOJoU/CDRdMgxOIGJq+v3YCkg/yt6o9Nh:6OJo24RdMgxOIkqD9g/c62L

Score
7/10
microsoftdiscoveryphishingspywarestealer

Malware Config

Targets

    • Target

      NEAS.338aa66d2aee230d66b6cbc16fc6a930.exe

    • Size

      310KB

    • MD5

      338aa66d2aee230d66b6cbc16fc6a930

    • SHA1

      5d4564c50a7c6892dc2562ddcd8af53b44774cd5

    • SHA256

      9c24b2573a43c06b6d325d7bc935ac482db033d6d6662a584642ac40583c5781

    • SHA512

      3c823d57d0dbf64fc7cfa7075ee5ab7e147a0340baed07a803342accd6515824dce8fbd7bb522aed0f95aae4c8cdeaf3ded408ee06c7da0c3eb2ad9ab003c948

    • SSDEEP

      6144:kBOJoU/CDRdMgxOIGJq+v3YCkg/yt6o9Nh:6OJo24RdMgxOIkqD9g/c62L

    Score
    7/10
    discoveryspywarestealermicrosoftphishing

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks