Overview

overview

10

Static

static

3

NEAS.e963a...30.exe

windows7-x64

10

NEAS.e963a...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.e963a1714b32c629d83c2ea860f51230.exe

  • Size

    285KB

  • Sample

    231104-pjwl7sbh64

  • MD5

    e963a1714b32c629d83c2ea860f51230

  • SHA1

    f965b3bb86d39e10cc094f6f53dca5f5d75192ee

  • SHA256

    a65dfed40864a2abba5c2b0b56e01de58c2223c13d125b82cc7a12a035aa11f8

  • SHA512

    0b7cee41ea190d6f9073f7c941ebea1eb98fd73bc8dceb90085347c6959cf34b21d9468c82d18a93e162510ed27548bbd85b487ecc28876a37a59ff041245942

  • SSDEEP

    3072:+0dQDF+sQvhfSXBnecKVcbMloVRr3uMg0kAqSxYiJ2QM4GKch:+0dqmcKQIoi7tWa

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.e963a1714b32c629d83c2ea860f51230.exe

    • Size

      285KB

    • MD5

      e963a1714b32c629d83c2ea860f51230

    • SHA1

      f965b3bb86d39e10cc094f6f53dca5f5d75192ee

    • SHA256

      a65dfed40864a2abba5c2b0b56e01de58c2223c13d125b82cc7a12a035aa11f8

    • SHA512

      0b7cee41ea190d6f9073f7c941ebea1eb98fd73bc8dceb90085347c6959cf34b21d9468c82d18a93e162510ed27548bbd85b487ecc28876a37a59ff041245942

    • SSDEEP

      3072:+0dQDF+sQvhfSXBnecKVcbMloVRr3uMg0kAqSxYiJ2QM4GKch:+0dqmcKQIoi7tWa

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks