590d7fcb57e701147bd61fd7d0a5d4baf559bb57e36367f86afff0621e44d25a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0a44e467fbd84a79251297ad6eb97b20.exe
Size

459KB
Sample

231111-stdqxsaa93
MD5

0a44e467fbd84a79251297ad6eb97b20
SHA1

f03e30394db0861af3774c967ac7a85f0cf56f83
SHA256

590d7fcb57e701147bd61fd7d0a5d4baf559bb57e36367f86afff0621e44d25a
SHA512

8b257b09f1182e8e8000f42ba79d793ba173879a7f695b25e83695d550472a9c53845ff037c649c4f8b4235f7181fd03e05c5cc178a2004b966f6f3d07f31338
SSDEEP

6144:BHIY3O9/MwGsmLrZNs/VKi/MwGsmLr5+Nod/MwGsmLrZNs/VKi/MwGsmLrRo68lS:BHIBMmmpNs/VXMmmg8MmmpNs/VXMmm

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  NEAS.0a44e467fbd84a79251297ad6eb97b20.exe
- Size
  
  459KB
- MD5
  
  0a44e467fbd84a79251297ad6eb97b20
- SHA1
  
  f03e30394db0861af3774c967ac7a85f0cf56f83
- SHA256
  
  590d7fcb57e701147bd61fd7d0a5d4baf559bb57e36367f86afff0621e44d25a
- SHA512
  
  8b257b09f1182e8e8000f42ba79d793ba173879a7f695b25e83695d550472a9c53845ff037c649c4f8b4235f7181fd03e05c5cc178a2004b966f6f3d07f31338
- SSDEEP
  
  6144:BHIY3O9/MwGsmLrZNs/VKi/MwGsmLr5+Nod/MwGsmLrZNs/VKi/MwGsmLrRo68lS:BHIBMmmpNs/VXMmmg8MmmpNs/VXMmm
Score

10^/10

persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2