Overview

overview

10

Static

static

3

58acd2d9ca...AS.exe

windows7-x64

10

58acd2d9ca...AS.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    58acd2d9ca8b17b767e92f20b9a439b0_NEAS

  • Size

    377KB

  • Sample

    240507-drp9lsff3w

  • MD5

    58acd2d9ca8b17b767e92f20b9a439b0

  • SHA1

    b6e1047bc2f93a9aac565d9550fb4c626cf9934a

  • SHA256

    12b612a61f87a82af7877794360d0a85ff8c71725ca24c23bda825678668470a

  • SHA512

    e51e7f913a802a138cc2a77ee022364eb5247acebd4265d3a4322a333231e33309bf6ede18ba122781f268fe194f1509fc78869576a2a2665e67c458f2f2a54a

  • SSDEEP

    3072:xHyZKVTF0GSUNl5ecz7RAxFKUXCt8/zAIo92VGiK/zAIC588:JdWGSUNl5fKx/SgnohignC5V

Score
10/10
persistence

Malware Config

Targets

    • Target

      58acd2d9ca8b17b767e92f20b9a439b0_NEAS

    • Size

      377KB

    • MD5

      58acd2d9ca8b17b767e92f20b9a439b0

    • SHA1

      b6e1047bc2f93a9aac565d9550fb4c626cf9934a

    • SHA256

      12b612a61f87a82af7877794360d0a85ff8c71725ca24c23bda825678668470a

    • SHA512

      e51e7f913a802a138cc2a77ee022364eb5247acebd4265d3a4322a333231e33309bf6ede18ba122781f268fe194f1509fc78869576a2a2665e67c458f2f2a54a

    • SSDEEP

      3072:xHyZKVTF0GSUNl5ecz7RAxFKUXCt8/zAIo92VGiK/zAIC588:JdWGSUNl5fKx/SgnohignC5V

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks