Overview

overview

10

Static

static

3

NEAS.afa9b...a0.exe

windows7-x64

10

NEAS.afa9b...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.afa9bb2206440d722c15d49d1b0849a0.exe

  • Size

    275KB

  • Sample

    231107-t9yxgade47

  • MD5

    afa9bb2206440d722c15d49d1b0849a0

  • SHA1

    42f3c56f7bbf0e3e9b4f3e95e49f9c3bc1528d97

  • SHA256

    ae80615efc556befc0d74b848c79c26f763dfb262f829141114bafb474f6d1ab

  • SHA512

    5b58613ff6975be2cf983b5b46ded2877d3c922f69ef1d50c692c718c5b871a6326aa9698d847c65cc61d6aa97124117eb7d97508554aa97009bc0ae0ec24790

  • SSDEEP

    6144:nqr8KzlSLGS+sz/QoooooooooooooooooUvu:nw8Kessz/0vu

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.afa9bb2206440d722c15d49d1b0849a0.exe

    • Size

      275KB

    • MD5

      afa9bb2206440d722c15d49d1b0849a0

    • SHA1

      42f3c56f7bbf0e3e9b4f3e95e49f9c3bc1528d97

    • SHA256

      ae80615efc556befc0d74b848c79c26f763dfb262f829141114bafb474f6d1ab

    • SHA512

      5b58613ff6975be2cf983b5b46ded2877d3c922f69ef1d50c692c718c5b871a6326aa9698d847c65cc61d6aa97124117eb7d97508554aa97009bc0ae0ec24790

    • SSDEEP

      6144:nqr8KzlSLGS+sz/QoooooooooooooooooUvu:nw8Kessz/0vu

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks