83aa481a1b44a4b8ada32ffb23c8032c1c67a72036d4e722d76db3cf793c1671 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8c50d24665a849316a888ff283ba8cc0.exe
Size

1.8MB
Sample

231113-fpnzwahf8v
MD5

8c50d24665a849316a888ff283ba8cc0
SHA1

36cda55e88a91fdbdaba91e40bba85363fe02cb1
SHA256

83aa481a1b44a4b8ada32ffb23c8032c1c67a72036d4e722d76db3cf793c1671
SHA512

e29ab4a26ac7f0122f07a6536553cc725c47c9a4ea90920a8a17f43fe0820a736184e646c7fb820eeca2fa8c423b1d0cb1601b8699b91bc280b1a479ac87be28
SSDEEP

24576:54nXubIQGyxbPV0db269NVEujQoYpuJYomrjVBm2qPu0fsq9a+t8cKfFJkbpWgNp:5qe3f6OTbpuJ5gZsralcKfFoYgcRGt

Score

8^/10

discovery

Malware Config

Targets

- Target
  
  NEAS.8c50d24665a849316a888ff283ba8cc0.exe
- Size
  
  1.8MB
- MD5
  
  8c50d24665a849316a888ff283ba8cc0
- SHA1
  
  36cda55e88a91fdbdaba91e40bba85363fe02cb1
- SHA256
  
  83aa481a1b44a4b8ada32ffb23c8032c1c67a72036d4e722d76db3cf793c1671
- SHA512
  
  e29ab4a26ac7f0122f07a6536553cc725c47c9a4ea90920a8a17f43fe0820a736184e646c7fb820eeca2fa8c423b1d0cb1601b8699b91bc280b1a479ac87be28
- SSDEEP
  
  24576:54nXubIQGyxbPV0db269NVEujQoYpuJYomrjVBm2qPu0fsq9a+t8cKfFJkbpWgNp:5qe3f6OTbpuJ5gZsralcKfFoYgcRGt
Score

8^/10

discovery
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2