Overview

overview

10

Static

static

3

NEAS.de505...f0.exe

windows7-x64

10

NEAS.de505...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.de5056f2cb4a82ec6dc797db0361d9f0.exe

  • Size

    250KB

  • Sample

    231112-qb1fvsgf33

  • MD5

    de5056f2cb4a82ec6dc797db0361d9f0

  • SHA1

    a5e0dd3397794363b44fbb39da20969ddb8f38f7

  • SHA256

    f8946b3674beee839bfdffe6a1d73789df5500e55ef1d06d76fa6c097a8979c5

  • SHA512

    19ca0b6b183230aba6212d76fb42880e65a42103082e92baca5986c037d5e687973cdb10a2545a408a6898cc00fbfb1bac27f43e7af5e4b83bba6abba97c7923

  • SSDEEP

    6144:gtBacvCvfmZ7KRRRGBCvfmZ7KFpNlJTBCvfmZ7d:gD0

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.de5056f2cb4a82ec6dc797db0361d9f0.exe

    • Size

      250KB

    • MD5

      de5056f2cb4a82ec6dc797db0361d9f0

    • SHA1

      a5e0dd3397794363b44fbb39da20969ddb8f38f7

    • SHA256

      f8946b3674beee839bfdffe6a1d73789df5500e55ef1d06d76fa6c097a8979c5

    • SHA512

      19ca0b6b183230aba6212d76fb42880e65a42103082e92baca5986c037d5e687973cdb10a2545a408a6898cc00fbfb1bac27f43e7af5e4b83bba6abba97c7923

    • SSDEEP

      6144:gtBacvCvfmZ7KRRRGBCvfmZ7KFpNlJTBCvfmZ7d:gD0

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks