Overview

overview

7

Static

static

7

NEAS.93b85...d5.exe

windows7-x64

7

NEAS.93b85...d5.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.93b85904ee44f0fb32002dabd8fc944262f57ca7fe62dc8c2a86fcddd7c5d7d5.exe

  • Size

    80KB

  • Sample

    231112-w74q2sah73

  • MD5

    f95789c092ce9f252857875c242f33d6

  • SHA1

    ce6db0c9f829a7101825ef36c1e40f9e6047e829

  • SHA256

    93b85904ee44f0fb32002dabd8fc944262f57ca7fe62dc8c2a86fcddd7c5d7d5

  • SHA512

    97c132dcdb73b8057a9cf806bdec28f98241ece9d4eba314feb9c6f9aa8c9df908892083dbd75f32de205cfffcdae65a98613410ed49fa56dff7ef16d49a924c

  • SSDEEP

    1536:lqjyXN0ly65p6wGYFEEDxSV7SRYnQm4dcslN4ZJjeSVtSWwnouy8jS:w+Xe58wGYFxDxSQpdcslNANV2outjS

Score
7/10
upx

Malware Config

Targets

    • Target

      NEAS.93b85904ee44f0fb32002dabd8fc944262f57ca7fe62dc8c2a86fcddd7c5d7d5.exe

    • Size

      80KB

    • MD5

      f95789c092ce9f252857875c242f33d6

    • SHA1

      ce6db0c9f829a7101825ef36c1e40f9e6047e829

    • SHA256

      93b85904ee44f0fb32002dabd8fc944262f57ca7fe62dc8c2a86fcddd7c5d7d5

    • SHA512

      97c132dcdb73b8057a9cf806bdec28f98241ece9d4eba314feb9c6f9aa8c9df908892083dbd75f32de205cfffcdae65a98613410ed49fa56dff7ef16d49a924c

    • SSDEEP

      1536:lqjyXN0ly65p6wGYFEEDxSV7SRYnQm4dcslN4ZJjeSVtSWwnouy8jS:w+Xe58wGYFxDxSQpdcslNANV2outjS

    Score
    7/10
    upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks