Overview

overview

10

Static

static

3

NEAS.f8d5d...c0.exe

windows7-x64

10

NEAS.f8d5d...c0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f8d5db516caf875c82ea4200647e42c0.exe

  • Size

    479KB

  • Sample

    231117-zh79qadh85

  • MD5

    f8d5db516caf875c82ea4200647e42c0

  • SHA1

    a0f4619ce7e3b7b64834a1c3f0f54aefd45db859

  • SHA256

    d4e1a9e1440deef9ae7abe635b0bbe04a6520ef953a27a6083bcb390307ac32c

  • SHA512

    6bde00099771728bbb4e6794be3f632fc23d292d8ea0001b15942dec0dd2cde96aa4d3145851f2fb42dd2a36aff22406f075f9c30d95751ead1a5bb2f1b9e5cd

  • SSDEEP

    6144:M1P36POwXYrMdlvkGr0f+uPOwXYrMdl2MPnhd8+ZDI:YPtwIaJwISfPI

Score
10/10
persistence

Malware Config

Targets

    • Target

      NEAS.f8d5db516caf875c82ea4200647e42c0.exe

    • Size

      479KB

    • MD5

      f8d5db516caf875c82ea4200647e42c0

    • SHA1

      a0f4619ce7e3b7b64834a1c3f0f54aefd45db859

    • SHA256

      d4e1a9e1440deef9ae7abe635b0bbe04a6520ef953a27a6083bcb390307ac32c

    • SHA512

      6bde00099771728bbb4e6794be3f632fc23d292d8ea0001b15942dec0dd2cde96aa4d3145851f2fb42dd2a36aff22406f075f9c30d95751ead1a5bb2f1b9e5cd

    • SSDEEP

      6144:M1P36POwXYrMdlvkGr0f+uPOwXYrMdl2MPnhd8+ZDI:YPtwIaJwISfPI

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks