Overview

overview

10

Static

static

3

NEAS.1171a...60.exe

windows7-x64

10

NEAS.1171a...60.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.1171a0aa2daf07feccf820457594ab60.exe

  • Size

    399KB

  • Sample

    231117-xwzhmaeb7x

  • MD5

    1171a0aa2daf07feccf820457594ab60

  • SHA1

    de12ead6815152424ef07bb3ac4028784030f5df

  • SHA256

    74ae627387aa66bba40bbf0acc5e3ea31aafc40e149db1ef7517bbe51120ddfc

  • SHA512

    6d8de6b75ab6574ad945e6a3b03d486ff422a0824869a9e01cbd49b6bc1f138278841436625841e9a27cd68367310ca5e168625ff4ff83db89da90e6e42797ef

  • SSDEEP

    6144:TUqm62PQ///NR5fLYG3eujPQ///NR5fuTFzAJxf4zh8J7iTv+GwN/:TUVu/NcZ7/NG+nf4SiTv+Ga

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.1171a0aa2daf07feccf820457594ab60.exe

    • Size

      399KB

    • MD5

      1171a0aa2daf07feccf820457594ab60

    • SHA1

      de12ead6815152424ef07bb3ac4028784030f5df

    • SHA256

      74ae627387aa66bba40bbf0acc5e3ea31aafc40e149db1ef7517bbe51120ddfc

    • SHA512

      6d8de6b75ab6574ad945e6a3b03d486ff422a0824869a9e01cbd49b6bc1f138278841436625841e9a27cd68367310ca5e168625ff4ff83db89da90e6e42797ef

    • SSDEEP

      6144:TUqm62PQ///NR5fLYG3eujPQ///NR5fuTFzAJxf4zh8J7iTv+GwN/:TUVu/NcZ7/NG+nf4SiTv+Ga

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks