Overview

overview

10

Static

static

3

NEAS.b434c...60.exe

windows7-x64

10

NEAS.b434c...60.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.b434c3bbff4dfaefc347ff41e3a71560.exe

  • Size

    460KB

  • Sample

    231115-jaa19aeb99

  • MD5

    b434c3bbff4dfaefc347ff41e3a71560

  • SHA1

    506cdc36c9994e254005d4999f9fada163f8967b

  • SHA256

    491d86034c5a3a5c4a4136b8b941bf7ec06e4c72f4e898943eb355bdd6357ab2

  • SHA512

    0ab6f33816e72b10d34e1fc8238ef7c149f13c17f431248cfe645a31f7857ea294c0ad5c92f8a420f8490bf68cbeeba901db4fb81c05ddb70282b8885dc82598

  • SSDEEP

    6144:HdNgQpoqSTYaT15f7o+STYaT15fKj+v3WTlcy6TR9Tb:9NgQuTYapJoTYapI2mTlQTfT

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.b434c3bbff4dfaefc347ff41e3a71560.exe

    • Size

      460KB

    • MD5

      b434c3bbff4dfaefc347ff41e3a71560

    • SHA1

      506cdc36c9994e254005d4999f9fada163f8967b

    • SHA256

      491d86034c5a3a5c4a4136b8b941bf7ec06e4c72f4e898943eb355bdd6357ab2

    • SHA512

      0ab6f33816e72b10d34e1fc8238ef7c149f13c17f431248cfe645a31f7857ea294c0ad5c92f8a420f8490bf68cbeeba901db4fb81c05ddb70282b8885dc82598

    • SSDEEP

      6144:HdNgQpoqSTYaT15f7o+STYaT15fKj+v3WTlcy6TR9Tb:9NgQuTYapJoTYapI2mTlQTfT

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks