Overview

overview

10

Static

static

3

4408c59a9f...AS.exe

windows7-x64

10

4408c59a9f...AS.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4408c59a9f06f88719baa7c819d3b47e_NEAS

  • Size

    101KB

  • Sample

    240507-wrqt9ahb4x

  • MD5

    4408c59a9f06f88719baa7c819d3b47e

  • SHA1

    13b3f2458d425d77d224cd1fceda4cfa33f72a50

  • SHA256

    bb794aca29e18ad0fa76d12cff9b4f8af3cf9144de9ef6956cafbc0ffa7e777b

  • SHA512

    02846dc626eb256ccbe42a259d5dbb493cb3f06701b503c65edf7e4b3ab34b7eab2b5fc5724a229c43f36ba873136d65ace2c02437bae2905e104497936c88f6

  • SSDEEP

    3072:bGjDxyso1vh9solmcBbUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUuUUDUUUUUUG:CPxysMvhencBbUUUUUUUUUUUUUUUUUU9

Score
10/10
persistence

Malware Config

Targets

    • Target

      4408c59a9f06f88719baa7c819d3b47e_NEAS

    • Size

      101KB

    • MD5

      4408c59a9f06f88719baa7c819d3b47e

    • SHA1

      13b3f2458d425d77d224cd1fceda4cfa33f72a50

    • SHA256

      bb794aca29e18ad0fa76d12cff9b4f8af3cf9144de9ef6956cafbc0ffa7e777b

    • SHA512

      02846dc626eb256ccbe42a259d5dbb493cb3f06701b503c65edf7e4b3ab34b7eab2b5fc5724a229c43f36ba873136d65ace2c02437bae2905e104497936c88f6

    • SSDEEP

      3072:bGjDxyso1vh9solmcBbUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUuUUDUUUUUUG:CPxysMvhencBbUUUUUUUUUUUUUUUUUU9

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks