Overview

overview

7

Static

static

7

NEAS.afc0e...20.exe

windows7-x64

7

NEAS.afc0e...20.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.afc0e8ca805126afea6a435f63a87820.exe

  • Size

    210KB

  • Sample

    231116-mc95xaab68

  • MD5

    afc0e8ca805126afea6a435f63a87820

  • SHA1

    e85b1556917ae98d63ad0d2271caa33c1489c03a

  • SHA256

    e52400988a07ce80c2b963cff043e868dcd58b804304e878c882dd398c94a418

  • SHA512

    4d4dad888ff21a27c77738d96781b53b220642a6f1dbf54edb5ed6a5855e7a8205c21779a1dcfc9d3d97714bff5b3fa71d236a5f114e6c2d8600ae9e535c8e49

  • SSDEEP

    3072:KhS7VD4/EnzzMUD8u8EC45xRS5b7lIf3GYHfqR1hAtTD5DyXglREK0c2:dOizzb8uDxZCHlIZgEh5DyXglh

Score
7/10
aspackv2persistence

Malware Config

Targets

    • Target

      NEAS.afc0e8ca805126afea6a435f63a87820.exe

    • Size

      210KB

    • MD5

      afc0e8ca805126afea6a435f63a87820

    • SHA1

      e85b1556917ae98d63ad0d2271caa33c1489c03a

    • SHA256

      e52400988a07ce80c2b963cff043e868dcd58b804304e878c882dd398c94a418

    • SHA512

      4d4dad888ff21a27c77738d96781b53b220642a6f1dbf54edb5ed6a5855e7a8205c21779a1dcfc9d3d97714bff5b3fa71d236a5f114e6c2d8600ae9e535c8e49

    • SSDEEP

      3072:KhS7VD4/EnzzMUD8u8EC45xRS5b7lIf3GYHfqR1hAtTD5DyXglREK0c2:dOizzb8uDxZCHlIZgEh5DyXglh

    Score
    7/10
    aspackv2persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks