Overview

overview

10

Static

static

3

NEAS.d3210...e0.exe

windows7-x64

10

NEAS.d3210...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d3210846d7e995c8faadcfa9f3839ee0.exe

  • Size

    147KB

  • Sample

    231106-1h1qbaha72

  • MD5

    d3210846d7e995c8faadcfa9f3839ee0

  • SHA1

    9e7e41e7835d7fea4c71771f127e2b6cf0939593

  • SHA256

    69177b83c05ef1e3b99716693763dcfca9e8aa69aa033dda33ea82eb4584850a

  • SHA512

    7890b22609abdf5fb47f4f7393e9acd9c65ec3c44bdab1da2c5be473bc42fd8d4a9e8f91de3bd97296335f560a249c87f3dd1ee900a0333c7b5b4ab93156d715

  • SSDEEP

    3072:3LVoDvPd+A4WhkhXDl+i1lApwH08TdTIIIIIIIIIIIIIIIIIIfIIIIyIIIITIIIR:ZopGGgbiwU8JF

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      NEAS.d3210846d7e995c8faadcfa9f3839ee0.exe

    • Size

      147KB

    • MD5

      d3210846d7e995c8faadcfa9f3839ee0

    • SHA1

      9e7e41e7835d7fea4c71771f127e2b6cf0939593

    • SHA256

      69177b83c05ef1e3b99716693763dcfca9e8aa69aa033dda33ea82eb4584850a

    • SHA512

      7890b22609abdf5fb47f4f7393e9acd9c65ec3c44bdab1da2c5be473bc42fd8d4a9e8f91de3bd97296335f560a249c87f3dd1ee900a0333c7b5b4ab93156d715

    • SSDEEP

      3072:3LVoDvPd+A4WhkhXDl+i1lApwH08TdTIIIIIIIIIIIIIIIIIIfIIIIyIIIITIIIR:ZopGGgbiwU8JF

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Executes dropped EXE

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks