General

  • Target

    4698bb52d2a4879506fc299a7ff58300_NEAS

  • Size

    132KB

  • Sample

    240507-bwj72sfc33

  • MD5

    4698bb52d2a4879506fc299a7ff58300

  • SHA1

    0a1872a0134f137253e609953b5a2f5049deb80f

  • SHA256

    604279be22e30a3901f8508c9e6bdc2e24bf0892ce6f0dbc1ce07770aa7ad6e2

  • SHA512

    fe447b2a723c7b8c9491b2b3d6b94c320d726106b4b38e11b85d60a0523e271518b136adbb79310d6d469548fe1a4c9d2d7a094f072844855c3d1aa8d3a20769

  • SSDEEP

    3072:0EboFVlGAvwsgbpvYfMTc72L10fPsout6nnnS:jBzsgbpvnTcyOPsoS6nnnS

Score
7/10
upx

Malware Config

Targets

    • Target

      4698bb52d2a4879506fc299a7ff58300_NEAS

    • Size

      132KB

    • MD5

      4698bb52d2a4879506fc299a7ff58300

    • SHA1

      0a1872a0134f137253e609953b5a2f5049deb80f

    • SHA256

      604279be22e30a3901f8508c9e6bdc2e24bf0892ce6f0dbc1ce07770aa7ad6e2

    • SHA512

      fe447b2a723c7b8c9491b2b3d6b94c320d726106b4b38e11b85d60a0523e271518b136adbb79310d6d469548fe1a4c9d2d7a094f072844855c3d1aa8d3a20769

    • SSDEEP

      3072:0EboFVlGAvwsgbpvYfMTc72L10fPsout6nnnS:jBzsgbpvnTcyOPsoS6nnnS

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks