Analysis
-
max time kernel
122s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
12-10-2023 15:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.03ddf0b99b70a0da4261125379e05990_JC.exe
Resource
win7-20230831-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.03ddf0b99b70a0da4261125379e05990_JC.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
NEAS.03ddf0b99b70a0da4261125379e05990_JC.exe
-
Size
1.4MB
-
MD5
03ddf0b99b70a0da4261125379e05990
-
SHA1
fadb9cc42b0fb7f04db346c5f4e49f3905e316e0
-
SHA256
ed08891fffec6bc6a8218dc9a8e336b15058f42c95f00d9075fddcee352c4de1
-
SHA512
2c3d1215d591771b44a49b96734fe79e45bca1ad2729e82d94e895dd03106bc9f74b1d6ae8c9fd82e301073fc82bac37e0b92d6366fde720ab76b0358d5be30c
-
SSDEEP
24576:f1qDmRF+wpx/Qafy8bZwjP0cKe1JQDXb4GzL+C0SvGdawh04Ho:emRF+wn/JfyOmMcPPW53MaW04Ho
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe NEAS.03ddf0b99b70a0da4261125379e05990_JC.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2236 NEAS.03ddf0b99b70a0da4261125379e05990_JC.exe