Overview

overview

10

Static

static

3

581b9ff9bb...AS.exe

windows7-x64

10

581b9ff9bb...AS.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    581b9ff9bbed217b9128f2ad468d30b0_NEAS

  • Size

    361KB

  • Sample

    240507-dp4n8aae45

  • MD5

    581b9ff9bbed217b9128f2ad468d30b0

  • SHA1

    ca9293e1fa8624f456ca796e2a20ac3cb945228e

  • SHA256

    c0763b89fb5dba4976a9d9a695d4b1026e0f92bd643d4dec1950933ca9fb0078

  • SHA512

    7cd0b2a185d22ba671effe379d5873b0c42b8b707076e4eade947688868da642228a80c902f345834436af16dbf7a4d6cea62a2156bb36520295add048a3e5dd

  • SSDEEP

    6144:vspuvY3GsVQ///NR5fLvQ///NREQ///NR5fLYG3eujPQ///NR5f:vspuvew/Nq/NZ/NcZ7/N

Score
10/10
persistence

Malware Config

Targets

    • Target

      581b9ff9bbed217b9128f2ad468d30b0_NEAS

    • Size

      361KB

    • MD5

      581b9ff9bbed217b9128f2ad468d30b0

    • SHA1

      ca9293e1fa8624f456ca796e2a20ac3cb945228e

    • SHA256

      c0763b89fb5dba4976a9d9a695d4b1026e0f92bd643d4dec1950933ca9fb0078

    • SHA512

      7cd0b2a185d22ba671effe379d5873b0c42b8b707076e4eade947688868da642228a80c902f345834436af16dbf7a4d6cea62a2156bb36520295add048a3e5dd

    • SSDEEP

      6144:vspuvY3GsVQ///NR5fLvQ///NREQ///NR5fLYG3eujPQ///NR5f:vspuvew/Nq/NZ/NcZ7/N

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks