Overview

overview

10

Static

static

3

NEAS.c5204...a0.exe

windows7-x64

10

NEAS.c5204...a0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.c52045319e0aebc9c2455e31bb1210a0.exe

  • Size

    486KB

  • Sample

    231104-rlxy6adc36

  • MD5

    c52045319e0aebc9c2455e31bb1210a0

  • SHA1

    6d6ec2cceab64d9a7eb6f1f45c10e2b1fefd1910

  • SHA256

    3a0106d212c4598f3a9d3f2a5681136d83bbcc6b8deb00df68156a807bd0dfc5

  • SHA512

    60d62b24bd29e2e28ca955fc060ae0080c132a3746927c3a69f17cff36c69be3f09558c745ff4f290273c072b26bdcecfb8b4fcfd503e973ef559cc43ee45296

  • SSDEEP

    12288:S1bKd6kxW8DSacCB+Zy5ZMSA3R0NnvqC5kZWp+YjE:S1bKxW8eaN8SBnvqC551Y

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.c52045319e0aebc9c2455e31bb1210a0.exe

    • Size

      486KB

    • MD5

      c52045319e0aebc9c2455e31bb1210a0

    • SHA1

      6d6ec2cceab64d9a7eb6f1f45c10e2b1fefd1910

    • SHA256

      3a0106d212c4598f3a9d3f2a5681136d83bbcc6b8deb00df68156a807bd0dfc5

    • SHA512

      60d62b24bd29e2e28ca955fc060ae0080c132a3746927c3a69f17cff36c69be3f09558c745ff4f290273c072b26bdcecfb8b4fcfd503e973ef559cc43ee45296

    • SSDEEP

      12288:S1bKd6kxW8DSacCB+Zy5ZMSA3R0NnvqC5kZWp+YjE:S1bKxW8eaN8SBnvqC551Y

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks