General

  • Target

    368ace3dac3449bdc58ed48ce975ab60_NEAS

  • Size

    31KB

  • Sample

    240506-31rw8shc31

  • MD5

    368ace3dac3449bdc58ed48ce975ab60

  • SHA1

    6df082b3ebb68798d2282bd544863fe92bb8082e

  • SHA256

    540bda4fde2e2441560ec45853e1269337152e0787c4cc49ad12b05aeab76feb

  • SHA512

    71d9b8dc06f7b025409bc967152946ceeabadd795dab06eb6e6bb096aad2bb91c2b4af7cb9c6ec58e3dea2471d171e52b3cf32e906345448c2493505dc800416

  • SSDEEP

    768:1swsmbm+5tUzExePrYRTYzbRrcLqdq563rKj:1sQS+/UHPsyuqY03rC

Malware Config

Targets

    • Target

      368ace3dac3449bdc58ed48ce975ab60_NEAS

    • Size

      31KB

    • MD5

      368ace3dac3449bdc58ed48ce975ab60

    • SHA1

      6df082b3ebb68798d2282bd544863fe92bb8082e

    • SHA256

      540bda4fde2e2441560ec45853e1269337152e0787c4cc49ad12b05aeab76feb

    • SHA512

      71d9b8dc06f7b025409bc967152946ceeabadd795dab06eb6e6bb096aad2bb91c2b4af7cb9c6ec58e3dea2471d171e52b3cf32e906345448c2493505dc800416

    • SSDEEP

      768:1swsmbm+5tUzExePrYRTYzbRrcLqdq563rKj:1sQS+/UHPsyuqY03rC

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks