Overview

overview

10

Static

static

3

NEAS.a8b22...70.exe

windows7-x64

10

NEAS.a8b22...70.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.a8b2234c8e0a467e82ac3779c9a27c70.exe

  • Size

    790KB

  • Sample

    231107-geyxrsdh24

  • MD5

    a8b2234c8e0a467e82ac3779c9a27c70

  • SHA1

    486acbdffd9d54870d1e63b2d4bddcb0fe97c6f9

  • SHA256

    e389b926815987cf0a55203a59b121527adf51db67365bfb8ee690c9d527bafd

  • SHA512

    b908b74be2e0e29ad4844b3526a09fc045323bef9aff0b33438a56d5d8f9e89af00e8643941ff2cea5d9b59433f93b2b43cf82c75213acd206b09360267428d9

  • SSDEEP

    12288:cEcyQCFB24lwR45FB24lJ87g7/VycgE81lgxaa79y:cE/PLPEoIlg17o

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.a8b2234c8e0a467e82ac3779c9a27c70.exe

    • Size

      790KB

    • MD5

      a8b2234c8e0a467e82ac3779c9a27c70

    • SHA1

      486acbdffd9d54870d1e63b2d4bddcb0fe97c6f9

    • SHA256

      e389b926815987cf0a55203a59b121527adf51db67365bfb8ee690c9d527bafd

    • SHA512

      b908b74be2e0e29ad4844b3526a09fc045323bef9aff0b33438a56d5d8f9e89af00e8643941ff2cea5d9b59433f93b2b43cf82c75213acd206b09360267428d9

    • SSDEEP

      12288:cEcyQCFB24lwR45FB24lJ87g7/VycgE81lgxaa79y:cE/PLPEoIlg17o

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks