Overview

overview

10

Static

static

3

722aca3f21...AS.exe

windows7-x64

10

722aca3f21...AS.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    722aca3f21551061ff49375d2a07a540_NEAS

  • Size

    479KB

  • Sample

    240507-pec93afc4x

  • MD5

    722aca3f21551061ff49375d2a07a540

  • SHA1

    f6c37247f86d0e9a7ea1e27e0c360bdd79a2436e

  • SHA256

    30b39d0170635a8e3c6a6c4364669d8c08e44efeca6e4134b56189a916486321

  • SHA512

    d5af78a7f359277e02f31f339aa24e86820d39941bb12f3d84d87d25e160d124aacd822b8853e70572a3213eab8bf4de48876dfc1ce44c591566475a6c31656e

  • SSDEEP

    6144:pjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJ9+1aTEPTnOK4JKElDnWW:nRDc3yWDNU+YUznzNjElWaT07NQtDWW

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      722aca3f21551061ff49375d2a07a540_NEAS

    • Size

      479KB

    • MD5

      722aca3f21551061ff49375d2a07a540

    • SHA1

      f6c37247f86d0e9a7ea1e27e0c360bdd79a2436e

    • SHA256

      30b39d0170635a8e3c6a6c4364669d8c08e44efeca6e4134b56189a916486321

    • SHA512

      d5af78a7f359277e02f31f339aa24e86820d39941bb12f3d84d87d25e160d124aacd822b8853e70572a3213eab8bf4de48876dfc1ce44c591566475a6c31656e

    • SSDEEP

      6144:pjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJ9+1aTEPTnOK4JKElDnWW:nRDc3yWDNU+YUznzNjElWaT07NQtDWW

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Sets service image path in registry

      persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks