Overview

overview

10

Static

static

3

NEAS.07c6a...12.exe

windows7-x64

10

NEAS.07c6a...12.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.07c6a02d0a2c6ecd8510219c8de53912.exe

  • Size

    335KB

  • Sample

    231116-w5fw7sfh6z

  • MD5

    07c6a02d0a2c6ecd8510219c8de53912

  • SHA1

    45d13b8d8d1ecf8741358b7921895f7401a77831

  • SHA256

    95a0b3b98a01cc031776efb8ec48e5823f607d4ba6f0a244c922ecb47c856716

  • SHA512

    dfef4fa167ca55648e5691b4ffe42160060bb281801fd0628b91df20700692ac24145e644bd26d8411d2bbbefb510ffa9f4a2a0903876b2e9f0e844fc0566850

  • SSDEEP

    6144:mFMkEvLvwU/4qwvwU/4qvvwevwU/4q+vwk/4q7:mFMv

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.07c6a02d0a2c6ecd8510219c8de53912.exe

    • Size

      335KB

    • MD5

      07c6a02d0a2c6ecd8510219c8de53912

    • SHA1

      45d13b8d8d1ecf8741358b7921895f7401a77831

    • SHA256

      95a0b3b98a01cc031776efb8ec48e5823f607d4ba6f0a244c922ecb47c856716

    • SHA512

      dfef4fa167ca55648e5691b4ffe42160060bb281801fd0628b91df20700692ac24145e644bd26d8411d2bbbefb510ffa9f4a2a0903876b2e9f0e844fc0566850

    • SSDEEP

      6144:mFMkEvLvwU/4qwvwU/4qvvwevwU/4q+vwk/4q7:mFMv

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks