Overview

overview

10

Static

static

3

NEAS.19a58...b0.exe

windows7-x64

10

NEAS.19a58...b0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.19a58f81b02199879dc32323dcd079b0.exe

  • Size

    211KB

  • Sample

    231117-yp72vsdd87

  • MD5

    19a58f81b02199879dc32323dcd079b0

  • SHA1

    202bab4b8926c0462b383fce99f848c6a601fed3

  • SHA256

    a52fdfb6ccf0200b9ebcb2c313c37e52bc066612a0be860dd24a8ea56b772ed8

  • SHA512

    963beec0654bf293b589db3e3f42fb84d21803703a5d5ad719b3f52c08a4d9a497fcccc03fed16d59e972f5b661ca87d90e4759d721f80698a5b8d7bf5184612

  • SSDEEP

    3072:JD6Xtx68yygRBE52mxkEOHLRMpZ4deth8PEAjAfIbAYGPhz6sPJBInxZqO0:Jh8cBzHLRMpZ4d1Z0

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      NEAS.19a58f81b02199879dc32323dcd079b0.exe

    • Size

      211KB

    • MD5

      19a58f81b02199879dc32323dcd079b0

    • SHA1

      202bab4b8926c0462b383fce99f848c6a601fed3

    • SHA256

      a52fdfb6ccf0200b9ebcb2c313c37e52bc066612a0be860dd24a8ea56b772ed8

    • SHA512

      963beec0654bf293b589db3e3f42fb84d21803703a5d5ad719b3f52c08a4d9a497fcccc03fed16d59e972f5b661ca87d90e4759d721f80698a5b8d7bf5184612

    • SSDEEP

      3072:JD6Xtx68yygRBE52mxkEOHLRMpZ4deth8PEAjAfIbAYGPhz6sPJBInxZqO0:Jh8cBzHLRMpZ4d1Z0

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks