Overview

overview

9

Static

static

3

NEAS.b9a79...10.exe

windows7-x64

9

NEAS.b9a79...10.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.b9a79f80bfc4d285f83ed93d64247810.exe

  • Size

    190KB

  • Sample

    231117-f1pesafe47

  • MD5

    b9a79f80bfc4d285f83ed93d64247810

  • SHA1

    a889a634620df3c263f796d8bebd4983f6f290d3

  • SHA256

    d5abb5f261b11d4fd28157e723612354aa1ad3e0b6216e8c2f25646fa975220f

  • SHA512

    2b299367819ab9239fd1493e7ee8b3b6ea4f0c02a7d7591a0c854017ea1cac8230ca50c054e10e038e67c361431c08d2c62168b9f0d05aac1a8fc5fe0bc90b0a

  • SSDEEP

    3072:6e7WpbAIuZAIuYSMjoqtMHfhfpYRY0Zk6zF+m9L:RqBAIuZAIuDMVtM/8aC9L

Score
9/10
ransomware

Malware Config

Targets

    • Target

      NEAS.b9a79f80bfc4d285f83ed93d64247810.exe

    • Size

      190KB

    • MD5

      b9a79f80bfc4d285f83ed93d64247810

    • SHA1

      a889a634620df3c263f796d8bebd4983f6f290d3

    • SHA256

      d5abb5f261b11d4fd28157e723612354aa1ad3e0b6216e8c2f25646fa975220f

    • SHA512

      2b299367819ab9239fd1493e7ee8b3b6ea4f0c02a7d7591a0c854017ea1cac8230ca50c054e10e038e67c361431c08d2c62168b9f0d05aac1a8fc5fe0bc90b0a

    • SSDEEP

      3072:6e7WpbAIuZAIuYSMjoqtMHfhfpYRY0Zk6zF+m9L:RqBAIuZAIuDMVtM/8aC9L

    Score
    9/10
    ransomware

    • Renames multiple (1229) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Renames multiple (584) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks