Overview

overview

10

Static

static

7

NEAS.1d216...d7.exe

windows7-x64

10

NEAS.1d216...d7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.1d216b068ab71ecca2551e8bb57e02d7.exe

  • Size

    19KB

  • Sample

    231104-tegdyacd3v

  • MD5

    1d216b068ab71ecca2551e8bb57e02d7

  • SHA1

    f923383e8c0f472822d92513b8e990140555146b

  • SHA256

    a4ca4ee77ab1f9535276471ed2ac831421648201771920a4c700c7d307eb459e

  • SHA512

    d8c05ac93cd0823acede9deed8e67b13b7fb6a1739c70fe1447c024619a48cc40495fc822e829f34873a4e3bce3a28df80d9ba8e1f5a8ce6b931b7d555bce092

  • SSDEEP

    384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvXKN:rRkiLw3HsDSARGG/6N

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      NEAS.1d216b068ab71ecca2551e8bb57e02d7.exe

    • Size

      19KB

    • MD5

      1d216b068ab71ecca2551e8bb57e02d7

    • SHA1

      f923383e8c0f472822d92513b8e990140555146b

    • SHA256

      a4ca4ee77ab1f9535276471ed2ac831421648201771920a4c700c7d307eb459e

    • SHA512

      d8c05ac93cd0823acede9deed8e67b13b7fb6a1739c70fe1447c024619a48cc40495fc822e829f34873a4e3bce3a28df80d9ba8e1f5a8ce6b931b7d555bce092

    • SSDEEP

      384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvXKN:rRkiLw3HsDSARGG/6N

    Score
    10/10
    evasionpersistencetrojanupx

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks