Overview

overview

10

Static

static

3

NEAS.a9fc2...10.exe

windows7-x64

10

NEAS.a9fc2...10.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.a9fc2245bc3000d14f9e849480385f10.exe

  • Size

    437KB

  • Sample

    231111-qanexafe5y

  • MD5

    a9fc2245bc3000d14f9e849480385f10

  • SHA1

    9e4f34040210a2e2d56233efc1bdb370b7425fee

  • SHA256

    bd5cd9794cf9a4e97bf006da29853a85f4c8d55a421a26c5e1ddda46ccd2d99d

  • SHA512

    dcefc4d99b511cad3a42e737d6083c9a7f5fff556b7593765729af0b04c37739b6160a16e94a677c3ebadb651569b0b06e95acff30a0a0f2aca119f634b5587f

  • SSDEEP

    6144:6Bz+CyPQ///NR5fLYG3eujPQ///NR5f23HHeMX5mKvok:Uzn/NcZ7/N+HHTX5mKvok

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.a9fc2245bc3000d14f9e849480385f10.exe

    • Size

      437KB

    • MD5

      a9fc2245bc3000d14f9e849480385f10

    • SHA1

      9e4f34040210a2e2d56233efc1bdb370b7425fee

    • SHA256

      bd5cd9794cf9a4e97bf006da29853a85f4c8d55a421a26c5e1ddda46ccd2d99d

    • SHA512

      dcefc4d99b511cad3a42e737d6083c9a7f5fff556b7593765729af0b04c37739b6160a16e94a677c3ebadb651569b0b06e95acff30a0a0f2aca119f634b5587f

    • SSDEEP

      6144:6Bz+CyPQ///NR5fLYG3eujPQ///NR5f23HHeMX5mKvok:Uzn/NcZ7/N+HHTX5mKvok

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks