Overview

overview

10

Static

static

3

NEAS.d5a5b...a0.exe

windows7-x64

10

NEAS.d5a5b...a0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.d5a5b7c6bb0290169f877cb099c64aa0.exe

  • Size

    144KB

  • Sample

    231117-cfccyadc63

  • MD5

    d5a5b7c6bb0290169f877cb099c64aa0

  • SHA1

    da462f45d9c859143f1a30ba90abb2bb79ad656d

  • SHA256

    1ede3da78dc089e1dffebfebc26b2725a8c71dde5df26ce7720ac3dde8ec8076

  • SHA512

    29203418e889b0b892d4fb971c3703cb48d19a423a9976a2316dc3e006569ffc817cb172ad35ddc15e995860764c42268a83071a1eed2003f158e63a85059dfd

  • SSDEEP

    3072:Nnn+j6qw3H8qvZh1szdH13+EE+RaZ6r+GDZnBcVU:VnQ6qw3b1szd5IF6rfBBcVU

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.d5a5b7c6bb0290169f877cb099c64aa0.exe

    • Size

      144KB

    • MD5

      d5a5b7c6bb0290169f877cb099c64aa0

    • SHA1

      da462f45d9c859143f1a30ba90abb2bb79ad656d

    • SHA256

      1ede3da78dc089e1dffebfebc26b2725a8c71dde5df26ce7720ac3dde8ec8076

    • SHA512

      29203418e889b0b892d4fb971c3703cb48d19a423a9976a2316dc3e006569ffc817cb172ad35ddc15e995860764c42268a83071a1eed2003f158e63a85059dfd

    • SSDEEP

      3072:Nnn+j6qw3H8qvZh1szdH13+EE+RaZ6r+GDZnBcVU:VnQ6qw3b1szd5IF6rfBBcVU

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks