Overview

overview

10

Static

static

3

NEAS.fc69e...a0.exe

windows7-x64

10

NEAS.fc69e...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.fc69e65eb9f946797a0c8041e20fb4a0.exe

  • Size

    400KB

  • Sample

    231117-xl6tysch48

  • MD5

    fc69e65eb9f946797a0c8041e20fb4a0

  • SHA1

    b1b76a04e3cb0b13eb6eaf52fec1b2acb08c3006

  • SHA256

    ef0f40a6c0a06b24fa7ec40c787ecdcaacc3639ac88832f811119f69d44fe805

  • SHA512

    7f56a200bf35987ba81607e7292fda88d15a0838e0241735d910f471ab00433af1a286be913d11d082524b3627e4f965caa940bd2c4fd3a48f398d9d1ceb205d

  • SSDEEP

    6144:353wEFdLAY/Xr4Br3CbArLAZ26RQ8sY6CbArLAY/9bPk6Cbv:1wORrgryg426RQagrkj

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.fc69e65eb9f946797a0c8041e20fb4a0.exe

    • Size

      400KB

    • MD5

      fc69e65eb9f946797a0c8041e20fb4a0

    • SHA1

      b1b76a04e3cb0b13eb6eaf52fec1b2acb08c3006

    • SHA256

      ef0f40a6c0a06b24fa7ec40c787ecdcaacc3639ac88832f811119f69d44fe805

    • SHA512

      7f56a200bf35987ba81607e7292fda88d15a0838e0241735d910f471ab00433af1a286be913d11d082524b3627e4f965caa940bd2c4fd3a48f398d9d1ceb205d

    • SSDEEP

      6144:353wEFdLAY/Xr4Br3CbArLAZ26RQ8sY6CbArLAY/9bPk6Cbv:1wORrgryg426RQagrkj

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks