Overview

overview

10

Static

static

3

NEAS.c06f6...30.exe

windows7-x64

10

NEAS.c06f6...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.c06f6c2b67c6a23a3dac7b9bc087e530.exe

  • Size

    275KB

  • Sample

    231107-d1rh2aag5v

  • MD5

    c06f6c2b67c6a23a3dac7b9bc087e530

  • SHA1

    b6d440588225d503f71ce48a957f8b9bbb067a7d

  • SHA256

    b6f27155cb96b038977724698ad7eeee7defc70ca73f2779e28e979a9ed14f0e

  • SHA512

    b3950739dcbdad864bf115bd6ef9844561f787f59446565818b6c27759303fdaa24dcfa8480162e9b67c8ca1a08c233aa3c7029aef1402b71a154112cc5a48cc

  • SSDEEP

    6144:Tg146A5/47+TzfYmWbRa3/hrMwcVKDmmWbRa3:Tg14bZrWlmMwcVKWl

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.c06f6c2b67c6a23a3dac7b9bc087e530.exe

    • Size

      275KB

    • MD5

      c06f6c2b67c6a23a3dac7b9bc087e530

    • SHA1

      b6d440588225d503f71ce48a957f8b9bbb067a7d

    • SHA256

      b6f27155cb96b038977724698ad7eeee7defc70ca73f2779e28e979a9ed14f0e

    • SHA512

      b3950739dcbdad864bf115bd6ef9844561f787f59446565818b6c27759303fdaa24dcfa8480162e9b67c8ca1a08c233aa3c7029aef1402b71a154112cc5a48cc

    • SSDEEP

      6144:Tg146A5/47+TzfYmWbRa3/hrMwcVKDmmWbRa3:Tg14bZrWlmMwcVKWl

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks