Overview

overview

10

Static

static

3

NEAS.f66f9...7d.exe

windows7-x64

10

NEAS.f66f9...7d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.f66f90ed8997d04189628c313dd1bc7d.exe

  • Size

    437KB

  • Sample

    231114-kbml4sab93

  • MD5

    f66f90ed8997d04189628c313dd1bc7d

  • SHA1

    95b5906b75438e760be8aa042d9276bb305f698f

  • SHA256

    a2ea12f225b004fcc793bbbf33f1af3266f352a3d00a55199a84b92993712335

  • SHA512

    d915c3b72db67d5ff57b96ef87c67c622b560024e9d0d0776fff87fad1b63e1e7ea8e4e8f6be850e093687f43b1d43670275f7b45922fffff825f077b381e244

  • SSDEEP

    6144:RiG8wPQ///NR5fLYG3eujPQ///NR5f23HHeMX5mKvok:RiGm/NcZ7/N+HHTX5mKvok

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.f66f90ed8997d04189628c313dd1bc7d.exe

    • Size

      437KB

    • MD5

      f66f90ed8997d04189628c313dd1bc7d

    • SHA1

      95b5906b75438e760be8aa042d9276bb305f698f

    • SHA256

      a2ea12f225b004fcc793bbbf33f1af3266f352a3d00a55199a84b92993712335

    • SHA512

      d915c3b72db67d5ff57b96ef87c67c622b560024e9d0d0776fff87fad1b63e1e7ea8e4e8f6be850e093687f43b1d43670275f7b45922fffff825f077b381e244

    • SSDEEP

      6144:RiG8wPQ///NR5fLYG3eujPQ///NR5f23HHeMX5mKvok:RiGm/NcZ7/N+HHTX5mKvok

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks