Overview

overview

10

Static

static

3

NEAS.c9be0...80.exe

windows7-x64

10

NEAS.c9be0...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.c9be084407bece479f60f9308362c280.exe

  • Size

    80KB

  • Sample

    231117-wll9wadb8y

  • MD5

    c9be084407bece479f60f9308362c280

  • SHA1

    a3023ad7cdf0ff3646c9e3f4fb51f4f743a2c30d

  • SHA256

    106458bfdde7dda8028b4c0946fc7ba268faad6b408991db7d3c6a391066b25e

  • SHA512

    d59dbde5b782473d6aaf57a64473f324c77d30284fb4d2d6b3f7f97b47d6ee654d0c450c8c10b2e8bcbada98dfb29a03f0e34c50aa14d0bc1a3dcc69e05ca7fb

  • SSDEEP

    1536:RgiGWNaw/cgYZI6iAKvNX3a2LoJ9VqDlzVxyh+CbxMa:RgiG+Fh6i1vtoJ9IDlRxyhTb7

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.c9be084407bece479f60f9308362c280.exe

    • Size

      80KB

    • MD5

      c9be084407bece479f60f9308362c280

    • SHA1

      a3023ad7cdf0ff3646c9e3f4fb51f4f743a2c30d

    • SHA256

      106458bfdde7dda8028b4c0946fc7ba268faad6b408991db7d3c6a391066b25e

    • SHA512

      d59dbde5b782473d6aaf57a64473f324c77d30284fb4d2d6b3f7f97b47d6ee654d0c450c8c10b2e8bcbada98dfb29a03f0e34c50aa14d0bc1a3dcc69e05ca7fb

    • SSDEEP

      1536:RgiGWNaw/cgYZI6iAKvNX3a2LoJ9VqDlzVxyh+CbxMa:RgiG+Fh6i1vtoJ9IDlRxyhTb7

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks