Overview

overview

10

Static

static

3

NEAS.d1157...50.exe

windows7-x64

10

NEAS.d1157...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d1157ad4443735d8bb507c6ad523ad50.exe

  • Size

    320KB

  • Sample

    231112-jlf2msdb6t

  • MD5

    d1157ad4443735d8bb507c6ad523ad50

  • SHA1

    b3d7f2b2f3ab527997f5a053cfb3a0af57a3503b

  • SHA256

    59ede67eff7f9af2ccdcdd5283a8f4e676b5f376bdea51e535ab8d677279ee68

  • SHA512

    84b7d582f0e5ba42574a62a4f9acbe8d53016a0eaf03b7a5f6c6d38508b521d10373f66b9682b3eb519bbe9787ad3d18508e57320ca9f7dae69e8414f53ca578

  • SSDEEP

    6144:2CZiG1cV+tbFOLM77OLnFe3HCqxNRmJ4PavntPRD:JFtsNePmjvtPRD

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.d1157ad4443735d8bb507c6ad523ad50.exe

    • Size

      320KB

    • MD5

      d1157ad4443735d8bb507c6ad523ad50

    • SHA1

      b3d7f2b2f3ab527997f5a053cfb3a0af57a3503b

    • SHA256

      59ede67eff7f9af2ccdcdd5283a8f4e676b5f376bdea51e535ab8d677279ee68

    • SHA512

      84b7d582f0e5ba42574a62a4f9acbe8d53016a0eaf03b7a5f6c6d38508b521d10373f66b9682b3eb519bbe9787ad3d18508e57320ca9f7dae69e8414f53ca578

    • SSDEEP

      6144:2CZiG1cV+tbFOLM77OLnFe3HCqxNRmJ4PavntPRD:JFtsNePmjvtPRD

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks