Overview

overview

8

Static

static

3

NEAS.f0d79...b0.exe

windows7-x64

1

NEAS.f0d79...b0.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f0d79889fea3b476fa6c7f0281f183b0.exe

  • Size

    119KB

  • Sample

    231111-p5zwrafd5s

  • MD5

    f0d79889fea3b476fa6c7f0281f183b0

  • SHA1

    16da3cf2880cb03e00ecd0148eb21975d10984de

  • SHA256

    f2867159b8fb247acedb387e838554930bc0c36107db5c760348bb868b600c9c

  • SHA512

    e51a8a6247ed49d1137c01695275b2b169a77d7fa4ccd6e47d7a051c9bfe364e0d591ad89258e78bb32237550a4e7bae3a578a2d2e76ab6348d6e9430bfdf0da

  • SSDEEP

    3072:euJJRTMXF7SrcNhOr09MTnObHsk8CyBIhuX:euJHoengHBFyioX

Score
8/10
discovery

Malware Config

Targets

    • Target

      NEAS.f0d79889fea3b476fa6c7f0281f183b0.exe

    • Size

      119KB

    • MD5

      f0d79889fea3b476fa6c7f0281f183b0

    • SHA1

      16da3cf2880cb03e00ecd0148eb21975d10984de

    • SHA256

      f2867159b8fb247acedb387e838554930bc0c36107db5c760348bb868b600c9c

    • SHA512

      e51a8a6247ed49d1137c01695275b2b169a77d7fa4ccd6e47d7a051c9bfe364e0d591ad89258e78bb32237550a4e7bae3a578a2d2e76ab6348d6e9430bfdf0da

    • SSDEEP

      3072:euJJRTMXF7SrcNhOr09MTnObHsk8CyBIhuX:euJHoengHBFyioX

    Score
    8/10
    discovery

    • Contacts a large (659) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Deletes itself

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks