Analysis

  • max time kernel
    146s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-10-2023 16:41

General

  • Target

    NEAS.09b10e99bdae2ce574b2ed1b36510e30_JC.exe

  • Size

    1.2MB

  • MD5

    09b10e99bdae2ce574b2ed1b36510e30

  • SHA1

    6d6c38addab3b73da2148560c96abdd5540c7994

  • SHA256

    f47316a09b03649bbe7b2b263bf532f31bf6071b951d3b523239f08cd39335f3

  • SHA512

    943ecb0d60a3f8a49f32c479124c3e69d5667b100cb06d6b46050ac2c5514d89f3a5f3836c3233188c343773b71686a41766619d294c577521217b935384dab6

  • SSDEEP

    24576:b6uEEPHVWcEtM1V+FF5hhwjXb/dvg7bGWM3lC31+21RXp:2pENW5tw4Lhwjb/Rg7b/dU21lp

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.09b10e99bdae2ce574b2ed1b36510e30_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.09b10e99bdae2ce574b2ed1b36510e30_JC.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious use of SetWindowsHookEx
    PID:1280

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1280-0-0x00000000002D0000-0x000000000067C000-memory.dmp

    Filesize

    3.7MB

  • memory/1280-1-0x00000000007C0000-0x00000000007C1000-memory.dmp

    Filesize

    4KB

  • memory/1280-2-0x00000000002D0000-0x000000000067C000-memory.dmp

    Filesize

    3.7MB

  • memory/1280-4-0x00000000007C0000-0x00000000007C1000-memory.dmp

    Filesize

    4KB