Overview

overview

10

Static

static

3

NEAS.dd8a4...b8.exe

windows7-x64

10

NEAS.dd8a4...b8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.dd8a4a009adbf89d29e348261f3651b8.exe

  • Size

    451KB

  • Sample

    231111-nsaknafe46

  • MD5

    dd8a4a009adbf89d29e348261f3651b8

  • SHA1

    da5906f1a875562a989548fb7bfb7f50219da235

  • SHA256

    3b1d9f0ad3125851f47b18c35360fcfb283d4e5a7edbdf579f9400a5d62e3c40

  • SHA512

    7482821a56c97dc1ac3b898d7fd7843b1d219a2b4fbb1db4987c9eba5d96b2bd9a2d32c455bc7feeb2b1363f8c562558377872fcf6e547cdd390ef16b3c4705e

  • SSDEEP

    6144:xWN8FvVKPQ///NR5fLYG3eujPQ///NR5fqZo4tjS6Y:o8Rh/NcZ7/NC64tm6Y

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.dd8a4a009adbf89d29e348261f3651b8.exe

    • Size

      451KB

    • MD5

      dd8a4a009adbf89d29e348261f3651b8

    • SHA1

      da5906f1a875562a989548fb7bfb7f50219da235

    • SHA256

      3b1d9f0ad3125851f47b18c35360fcfb283d4e5a7edbdf579f9400a5d62e3c40

    • SHA512

      7482821a56c97dc1ac3b898d7fd7843b1d219a2b4fbb1db4987c9eba5d96b2bd9a2d32c455bc7feeb2b1363f8c562558377872fcf6e547cdd390ef16b3c4705e

    • SSDEEP

      6144:xWN8FvVKPQ///NR5fLYG3eujPQ///NR5fqZo4tjS6Y:o8Rh/NcZ7/NC64tm6Y

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks