421e7496ae61e82d13e06257824269116a98685918d5715466588a93f64831c3 | Triage

Sharing

General

Target

NEAS.5bc30f4369cfd70848bdb3566772dde0.exe
Size

119KB
Sample

231116-j283cshh8s
MD5

5bc30f4369cfd70848bdb3566772dde0
SHA1

d9d6412d0b038e010dafad8e6c0a49709654f974
SHA256

421e7496ae61e82d13e06257824269116a98685918d5715466588a93f64831c3
SHA512

2276da2003882cf1d9f327035765cd34d257fd438f69f09ae9ed65e4fd814d51c839ed64d601f732c116fd2a2ef6cc53d9b40f45d192a3200b60c77e304d86eb
SSDEEP

3072:PpwcIn0VKYIWriwPzek8Evr1BhHLX4RO2wl1yVE7:hTIWhzekDvr1BxL4RwqVE7

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  NEAS.5bc30f4369cfd70848bdb3566772dde0.exe
- Size
  
  119KB
- MD5
  
  5bc30f4369cfd70848bdb3566772dde0
- SHA1
  
  d9d6412d0b038e010dafad8e6c0a49709654f974
- SHA256
  
  421e7496ae61e82d13e06257824269116a98685918d5715466588a93f64831c3
- SHA512
  
  2276da2003882cf1d9f327035765cd34d257fd438f69f09ae9ed65e4fd814d51c839ed64d601f732c116fd2a2ef6cc53d9b40f45d192a3200b60c77e304d86eb
- SSDEEP
  
  3072:PpwcIn0VKYIWriwPzek8Evr1BhHLX4RO2wl1yVE7:hTIWhzekDvr1BxL4RwqVE7
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
- Creates a large amount of network flows
  This may indicate a network scan to discover remotely running services.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2