Overview

overview

10

Static

static

3

NEAS.d1d16...40.exe

windows7-x64

10

NEAS.d1d16...40.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.d1d165b048f18da915f4569f286cbd40.exe

  • Size

    488KB

  • Sample

    231105-zy3n6see42

  • MD5

    d1d165b048f18da915f4569f286cbd40

  • SHA1

    f4241d7002a7ee805413fc68ab5454d88dc9f5e4

  • SHA256

    575c15b118a540481b71a29bc3fcfa3be60864374d140ff9f592ea7755617684

  • SHA512

    e2cdfe9039312dbb2b17757ef2879fab9d1338e77ebd1e7681a168990b71c9c96a32e24fcc4beef01676cbec33447636e6165eeae3282ee29d3341494179f405

  • SSDEEP

    6144:Uyif7on/TNId/1fon/T9P7GSon/TNId/1fon/T2oI0YokOsfY7Uon2KO:vi4NIVyeNIVy2oIvPKiKO

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.d1d165b048f18da915f4569f286cbd40.exe

    • Size

      488KB

    • MD5

      d1d165b048f18da915f4569f286cbd40

    • SHA1

      f4241d7002a7ee805413fc68ab5454d88dc9f5e4

    • SHA256

      575c15b118a540481b71a29bc3fcfa3be60864374d140ff9f592ea7755617684

    • SHA512

      e2cdfe9039312dbb2b17757ef2879fab9d1338e77ebd1e7681a168990b71c9c96a32e24fcc4beef01676cbec33447636e6165eeae3282ee29d3341494179f405

    • SSDEEP

      6144:Uyif7on/TNId/1fon/T9P7GSon/TNId/1fon/T2oI0YokOsfY7Uon2KO:vi4NIVyeNIVy2oIvPKiKO

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks