Overview

overview

8

Static

static

7

NEAS.62828...c0.exe

windows7-x64

8

NEAS.62828...c0.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.62828b438f35b449819b29d29f8457c0.exe

  • Size

    1.3MB

  • Sample

    231105-j5dqmaeh72

  • MD5

    62828b438f35b449819b29d29f8457c0

  • SHA1

    442a5a1f7dd396ed02af1a396773a4a87f45c6e4

  • SHA256

    1e6e3b684837e4bcb00014d93f50482617ee791b5edaff27c7ddca0d75d06c3d

  • SHA512

    7a85094b86cf1355ad5038920d76e4bd838f6caca3a16b43e2adb2a7ad271e80d4cfc1aedb33e51492870776331dc49dd9378370a4cd96365c8519c96b7234aa

  • SSDEEP

    24576:Qak/7Nk4RZuqKZu0zoFmDcpii9iGn+66rLfJIgtEqPILWz8oDqE:Qak/uZu+k0WdEacJRIo+E

Score
8/10
aspackv2discoveryspywarestealer

Malware Config

Targets

    • Target

      NEAS.62828b438f35b449819b29d29f8457c0.exe

    • Size

      1.3MB

    • MD5

      62828b438f35b449819b29d29f8457c0

    • SHA1

      442a5a1f7dd396ed02af1a396773a4a87f45c6e4

    • SHA256

      1e6e3b684837e4bcb00014d93f50482617ee791b5edaff27c7ddca0d75d06c3d

    • SHA512

      7a85094b86cf1355ad5038920d76e4bd838f6caca3a16b43e2adb2a7ad271e80d4cfc1aedb33e51492870776331dc49dd9378370a4cd96365c8519c96b7234aa

    • SSDEEP

      24576:Qak/7Nk4RZuqKZu0zoFmDcpii9iGn+66rLfJIgtEqPILWz8oDqE:Qak/uZu+k0WdEacJRIo+E

    Score
    8/10
    discoveryspywarestealer

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks