Overview

overview

7

Static

static

7

NEAS.28900...4c.exe

windows7-x64

7

NEAS.28900...4c.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.28900030d87b8933457875e0d2544e4c.exe

  • Size

    176KB

  • Sample

    231111-nsbgysef4v

  • MD5

    28900030d87b8933457875e0d2544e4c

  • SHA1

    634772d11c6812722175f5e39116d8fa0b9c66f7

  • SHA256

    2130cef6de7f7b3743042d567f73ad666e23dedd477c66b514aea07d4b7ec5f7

  • SHA512

    f078b61cb2c346d128230043cd020351846f83b127a0eee3fd993ae7c50c5fe8b1ac2271ef4021f544ba8a0ea14187ef21840ecece1f6d75e9e80635884c6350

  • SSDEEP

    3072:zj9mD4Pa78AgZUUeXVHI2uza78+OBNia6+en4FXMhWAYCXD:zjYD4PawAJ1VI2sa758Tey8ACz

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      NEAS.28900030d87b8933457875e0d2544e4c.exe

    • Size

      176KB

    • MD5

      28900030d87b8933457875e0d2544e4c

    • SHA1

      634772d11c6812722175f5e39116d8fa0b9c66f7

    • SHA256

      2130cef6de7f7b3743042d567f73ad666e23dedd477c66b514aea07d4b7ec5f7

    • SHA512

      f078b61cb2c346d128230043cd020351846f83b127a0eee3fd993ae7c50c5fe8b1ac2271ef4021f544ba8a0ea14187ef21840ecece1f6d75e9e80635884c6350

    • SSDEEP

      3072:zj9mD4Pa78AgZUUeXVHI2uza78+OBNia6+en4FXMhWAYCXD:zjYD4PawAJ1VI2sa758Tey8ACz

    Score
    7/10
    persistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks