Overview

overview

10

Static

static

3

NEAS.b958e...90.exe

windows7-x64

10

NEAS.b958e...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.b958ef6bfc278c1942346cd68a880690.exe

  • Size

    361KB

  • Sample

    231106-zdsy8sef4t

  • MD5

    b958ef6bfc278c1942346cd68a880690

  • SHA1

    fe895783d6f1e8972f12a00d1e9cd9b1c8f9512a

  • SHA256

    74316465936fee5df082a9fa3435e33aacd9e7af01387680268a3e62f9c3fe41

  • SHA512

    df9ff15c5a7b1c558f1c443637d7bb55f39b715a916a496a8d31873c6150bbbab1e6dfba666cb24dc172f51ddcfb840a519422603b40213500249dd41fd61769

  • SSDEEP

    6144:fYvdmdPI/UfueujH/AfZuQ///NR5fLYG3eujPQ///NR5f:GdmYMl/NcZ7/N

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.b958ef6bfc278c1942346cd68a880690.exe

    • Size

      361KB

    • MD5

      b958ef6bfc278c1942346cd68a880690

    • SHA1

      fe895783d6f1e8972f12a00d1e9cd9b1c8f9512a

    • SHA256

      74316465936fee5df082a9fa3435e33aacd9e7af01387680268a3e62f9c3fe41

    • SHA512

      df9ff15c5a7b1c558f1c443637d7bb55f39b715a916a496a8d31873c6150bbbab1e6dfba666cb24dc172f51ddcfb840a519422603b40213500249dd41fd61769

    • SSDEEP

      6144:fYvdmdPI/UfueujH/AfZuQ///NR5fLYG3eujPQ///NR5f:GdmYMl/NcZ7/N

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks