Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
09/10/2023, 16:19
General
-
Target
NEAS.20c438e9d7c441b67f691176b7dc05c0_JC.exe
-
Size
188KB
-
MD5
20c438e9d7c441b67f691176b7dc05c0
-
SHA1
b1e18fe97fe80b0e3ce71e9922f8d9f552818bfc
-
SHA256
1c64efa97cce8564f7d772c4ac5371bfc70923dce262fa4f20235ba5c3d12951
-
SHA512
a3592ca231ccdcd3e7b2011d647918898f261feaeae7c9735820063391105c1ebb1b2b414f7e7f00d14a20ba63a51a35d2d16e9aa7fa02dcbeb6df374bfab829
-
SSDEEP
768:oJEA+elap4nNM8+R6N5HzHa86fsWC/grMo58C/1H5:oJ7+eltm8Y6jHO86s/gHSI
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.20c438e9d7c441b67f691176b7dc05c0_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.20c438e9d7c441b67f691176b7dc05c0_JC.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3860 -s 2242⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3860 -ip 38601⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
188KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB