Overview

overview

10

Static

static

3

NEAS.21b4f...70.exe

windows7-x64

10

NEAS.21b4f...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.21b4f7f96fc92cd559fa79078162e170.exe

  • Size

    407KB

  • Sample

    231106-12c4csfg3s

  • MD5

    21b4f7f96fc92cd559fa79078162e170

  • SHA1

    c5be6331779cf403cf5e9211995f10c88aa8fbdc

  • SHA256

    17665a5e325acf3156d5c0b9a5850c60f2fbedae06164ae63a44172a902792c2

  • SHA512

    47a575fedf65fb60c96fdad1d5bbf9523e0ad2a86e67deba8d7cf3f65f19c27e556d15044c8a454f130d3e9bfd107ea0f16ff97e3dac670c39f3aa9eed952dcb

  • SSDEEP

    12288:yrAA/kRpV6yYP4rbpV6yYPg058KpV6yYPS:yrAhRW4XWleKWS

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.21b4f7f96fc92cd559fa79078162e170.exe

    • Size

      407KB

    • MD5

      21b4f7f96fc92cd559fa79078162e170

    • SHA1

      c5be6331779cf403cf5e9211995f10c88aa8fbdc

    • SHA256

      17665a5e325acf3156d5c0b9a5850c60f2fbedae06164ae63a44172a902792c2

    • SHA512

      47a575fedf65fb60c96fdad1d5bbf9523e0ad2a86e67deba8d7cf3f65f19c27e556d15044c8a454f130d3e9bfd107ea0f16ff97e3dac670c39f3aa9eed952dcb

    • SSDEEP

      12288:yrAA/kRpV6yYP4rbpV6yYPg058KpV6yYPS:yrAhRW4XWleKWS

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks