Overview

overview

10

Static

static

3

NEAS.4cb85...30.exe

windows7-x64

10

NEAS.4cb85...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.4cb858df3db2e646886aa34021bf1130.exe

  • Size

    440KB

  • Sample

    231107-ylwjnafa41

  • MD5

    4cb858df3db2e646886aa34021bf1130

  • SHA1

    9c1bb286b6d9121ae3abb3e1648858a67e08f8c4

  • SHA256

    2c2647b5ffa56a03db15f160f6978e3e90c8ea3c1e984212d3acbb49c901126d

  • SHA512

    61cb3c3d2d2e4dd5c28f82b7b70b617f169b6694da039c84b29fd8d87704e8adea785072e86d8497dd8ff56b41ec103673c7f4fed48fb4084c29ec4f5cc306fd

  • SSDEEP

    6144:GJKvl6ZV4U/vlf0DrBqvl8ZV4U/vlfl+9DvlEZV4U/vlf0DrBqvl8ZV4U/vlf:Gkvu6IveDVqvQ6IvYvc6IveDVqvQ6Iv

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.4cb858df3db2e646886aa34021bf1130.exe

    • Size

      440KB

    • MD5

      4cb858df3db2e646886aa34021bf1130

    • SHA1

      9c1bb286b6d9121ae3abb3e1648858a67e08f8c4

    • SHA256

      2c2647b5ffa56a03db15f160f6978e3e90c8ea3c1e984212d3acbb49c901126d

    • SHA512

      61cb3c3d2d2e4dd5c28f82b7b70b617f169b6694da039c84b29fd8d87704e8adea785072e86d8497dd8ff56b41ec103673c7f4fed48fb4084c29ec4f5cc306fd

    • SSDEEP

      6144:GJKvl6ZV4U/vlf0DrBqvl8ZV4U/vlfl+9DvlEZV4U/vlf0DrBqvl8ZV4U/vlf:Gkvu6IveDVqvQ6IvYvc6IveDVqvQ6Iv

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks