Overview

overview

7

Static

static

3

NEAS.e5db5...80.exe

windows7-x64

7

NEAS.e5db5...80.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.e5db559b3f619ff4c25146a52a2e4980.exe

  • Size

    484KB

  • Sample

    231107-zlh41aga6v

  • MD5

    e5db559b3f619ff4c25146a52a2e4980

  • SHA1

    3adf73858ad6a3931d3be57f8bf0e9840e87b56a

  • SHA256

    d35f693e246a8cd36d639537247d1dc3eacf3a4e9820bd3208f8b4cf094f9040

  • SHA512

    f6a27d70a561b1328043535ea1193703f5244be355543751828dd6ff5b2990c4786acaffa4e28db6834570dd5099a0eccf1138d255ec4db77a27dfd377482530

  • SSDEEP

    6144:hm6UslnVK8ZiOdphJ/6pMjT5/7riwtIQnpzo0Q4zRhELjrx/93gRk/4FztrnPmlp:hmDslUSCaZVW0Q+y3V4vBRe9

Score
7/10
persistence

Malware Config

Targets

    • Target

      NEAS.e5db559b3f619ff4c25146a52a2e4980.exe

    • Size

      484KB

    • MD5

      e5db559b3f619ff4c25146a52a2e4980

    • SHA1

      3adf73858ad6a3931d3be57f8bf0e9840e87b56a

    • SHA256

      d35f693e246a8cd36d639537247d1dc3eacf3a4e9820bd3208f8b4cf094f9040

    • SHA512

      f6a27d70a561b1328043535ea1193703f5244be355543751828dd6ff5b2990c4786acaffa4e28db6834570dd5099a0eccf1138d255ec4db77a27dfd377482530

    • SSDEEP

      6144:hm6UslnVK8ZiOdphJ/6pMjT5/7riwtIQnpzo0Q4zRhELjrx/93gRk/4FztrnPmlp:hmDslUSCaZVW0Q+y3V4vBRe9

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks