Overview

overview

10

Static

static

3

NEAS.c9982...b0.exe

windows7-x64

10

NEAS.c9982...b0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.c99829dd3d7c2560d55d298e57cba9b0.exe

  • Size

    446KB

  • Sample

    231113-dczjqsga5w

  • MD5

    c99829dd3d7c2560d55d298e57cba9b0

  • SHA1

    817052e01d3dbb1e40f9ab3c09770aa38f24aabe

  • SHA256

    a8b8742f7d2989cfddd714078d0a0833c008c05905039151caed32e408af7077

  • SHA512

    54edf88c85fb432770c5790ee210f2e1a0d62da832811e13bd74f30b6a4699e49ba459540045f6066d2c42c6c5b9eb89c9f0536210a7ebffd2b5a2f043112123

  • SSDEEP

    6144:LXX1t9w3X/POwXYrMdlvkGr0f+uPOwXYrMdlsLS7De:7va3+wIaJwIdSy

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.c99829dd3d7c2560d55d298e57cba9b0.exe

    • Size

      446KB

    • MD5

      c99829dd3d7c2560d55d298e57cba9b0

    • SHA1

      817052e01d3dbb1e40f9ab3c09770aa38f24aabe

    • SHA256

      a8b8742f7d2989cfddd714078d0a0833c008c05905039151caed32e408af7077

    • SHA512

      54edf88c85fb432770c5790ee210f2e1a0d62da832811e13bd74f30b6a4699e49ba459540045f6066d2c42c6c5b9eb89c9f0536210a7ebffd2b5a2f043112123

    • SSDEEP

      6144:LXX1t9w3X/POwXYrMdlvkGr0f+uPOwXYrMdlsLS7De:7va3+wIaJwIdSy

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks