Overview

overview

9

Static

static

1

NEAS.0428c...JC.exe

windows7-x64

9

NEAS.0428c...JC.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.0428cf42785533468ca331a6dd0a8dc0_JC.exe

  • Size

    497KB

  • Sample

    231104-x4brjaff96

  • MD5

    0428cf42785533468ca331a6dd0a8dc0

  • SHA1

    82791dd15dd53ae2a5482978966bff4608fe7416

  • SHA256

    1675d5cbb6291a7720e0b6f605332bb48f0aea1014d2c19231de4886adac21b4

  • SHA512

    021d0cd2372c9236aa4eb383c77123b49da2a01ac594a632b178bf0e88bb371698633c9884529b6d28d8dacba49b25881fe0258e2ba282414cfa7e438eaa5c60

  • SSDEEP

    12288:tYYZr6ypt7xGspjYu+Uhx63UXBQddduJDOxeP:tYcr6y/xxsg9BND0eP

Score
9/10
evasion

Malware Config

Targets

    • Target

      NEAS.0428cf42785533468ca331a6dd0a8dc0_JC.exe

    • Size

      497KB

    • MD5

      0428cf42785533468ca331a6dd0a8dc0

    • SHA1

      82791dd15dd53ae2a5482978966bff4608fe7416

    • SHA256

      1675d5cbb6291a7720e0b6f605332bb48f0aea1014d2c19231de4886adac21b4

    • SHA512

      021d0cd2372c9236aa4eb383c77123b49da2a01ac594a632b178bf0e88bb371698633c9884529b6d28d8dacba49b25881fe0258e2ba282414cfa7e438eaa5c60

    • SSDEEP

      12288:tYYZr6ypt7xGspjYu+Uhx63UXBQddduJDOxeP:tYcr6y/xxsg9BND0eP

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks