Overview

overview

10

Static

static

3

NEAS.79c06...d0.exe

windows7-x64

10

NEAS.79c06...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.79c064f59d622240da8b073ce612a9d0.exe

  • Size

    415KB

  • Sample

    231115-b6nm8abc8s

  • MD5

    79c064f59d622240da8b073ce612a9d0

  • SHA1

    f845eafea5911be4f6492395e892d0e4f504383d

  • SHA256

    05fd8740eafbd1f8dc4c9d0843fd1cadb3fa344a24a697d6e0b4cd1c5379b72d

  • SHA512

    c3008e6d803bce96c3e877b53478358adf884c08ac2f31243e30227e6233e9cf8dcaad27f83b49fbdcddf1c84a7dfe8c019ca2303a882936af21684e10b34d5f

  • SSDEEP

    12288:GISQ2oWj7NtInBBBBBBBBBBBBBBBBBBBBBBBBB0kfBBBBBBBBBBBBBBBBBBBBBBP:G1Q2klp

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.79c064f59d622240da8b073ce612a9d0.exe

    • Size

      415KB

    • MD5

      79c064f59d622240da8b073ce612a9d0

    • SHA1

      f845eafea5911be4f6492395e892d0e4f504383d

    • SHA256

      05fd8740eafbd1f8dc4c9d0843fd1cadb3fa344a24a697d6e0b4cd1c5379b72d

    • SHA512

      c3008e6d803bce96c3e877b53478358adf884c08ac2f31243e30227e6233e9cf8dcaad27f83b49fbdcddf1c84a7dfe8c019ca2303a882936af21684e10b34d5f

    • SSDEEP

      12288:GISQ2oWj7NtInBBBBBBBBBBBBBBBBBBBBBBBBB0kfBBBBBBBBBBBBBBBBBBBBBBP:G1Q2klp

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks