General

  • Target

    NEAS.32e73e577492945d1226e3e666be83d0_JC.exe

  • Size

    119KB

  • Sample

    231104-xrs52sdb9z

  • MD5

    32e73e577492945d1226e3e666be83d0

  • SHA1

    1f543109556858664de3a507298679decf023b42

  • SHA256

    9326c32b5f53a91a7487dd5c9fa3aafc8a513a9844235c6aa19edb2605e94402

  • SHA512

    bca6d987b1cafaeb3b112b2c175d9d51cb4e55f9d87d4fc35190940392b532603668ef74cd2c7c9fcfec7b2c4e1a5a2cb55f9da82d6bbd46c8a41ccb1617c43b

  • SSDEEP

    3072:5RjWhYDsCbmKxmOYjwMgEV0ne8wJRZLruld5KrhJ:5IGxmKxm/Pfke8wXNu5KT

Score
8/10

Malware Config

Targets

    • Target

      NEAS.32e73e577492945d1226e3e666be83d0_JC.exe

    • Size

      119KB

    • MD5

      32e73e577492945d1226e3e666be83d0

    • SHA1

      1f543109556858664de3a507298679decf023b42

    • SHA256

      9326c32b5f53a91a7487dd5c9fa3aafc8a513a9844235c6aa19edb2605e94402

    • SHA512

      bca6d987b1cafaeb3b112b2c175d9d51cb4e55f9d87d4fc35190940392b532603668ef74cd2c7c9fcfec7b2c4e1a5a2cb55f9da82d6bbd46c8a41ccb1617c43b

    • SSDEEP

      3072:5RjWhYDsCbmKxmOYjwMgEV0ne8wJRZLruld5KrhJ:5IGxmKxm/Pfke8wXNu5KT

    Score
    8/10
    • Contacts a large (514) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Deletes itself

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks