1046c4f25d9ce83bd8cbfdab5fec6608b7e9af738fb75797ae254b5643ca1b51

Analysis

max time kernel
44s
max time network
137s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12/10/2023, 16:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
Size

76KB
MD5

0e19f0f2db23710881eb2523a4fa3517
SHA1

6a5fbca3b4f89986945f75a8009930b5d0ddec7a
SHA256

1046c4f25d9ce83bd8cbfdab5fec6608b7e9af738fb75797ae254b5643ca1b51
SHA512

f10d85b7b40e35d355620bc8c88a238be2d8f81876a61a366cfe74e749df4d46b64a19d869bcf15749cde0b3c8635a9ba82fa90645907db80720c5f3bbb8168f
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzGvxuJ+o:lV2BZVPlFlnxClFvLLcA+sPDzGvxy+o

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 16 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\Half-Life 2 codes.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File opened for modification	C:\Windows\win32dc\UT2004 + crack.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File created	C:\Windows\win32dc\Quake3 + cheat.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike + serial.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File created	C:\Windows\win32dc\Sims 2(codes).exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File created	C:\Windows\win32dc\BattleField 1942_nocd.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File created	C:\Windows\win32dc\Counter-Strike(cheat).exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike(cheat).exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File created	C:\Windows\win32dc\UT2004_codes.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File created	C:\Windows\win32dc\BattleField 1942 + patch.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File opened for modification	C:\Windows\win32dc\Sims 2(codes).exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File created	C:\Windows\win32dc\UT2004 + crack.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File opened for modification	C:\Windows\win32dc\UT2004_codes.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942 + patch.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File created	C:\Windows\win32dc\Counter-Strike + serial.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File created	C:\Windows\win32dc\Half-Life 2 codes.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe"
1⤵
- Drops file in Windows directory
PID:2628

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\win32dc\Quake3 + cheat.exe

Filesize
76KB

MD5
0e19f0f2db23710881eb2523a4fa3517

SHA1
6a5fbca3b4f89986945f75a8009930b5d0ddec7a

SHA256
1046c4f25d9ce83bd8cbfdab5fec6608b7e9af738fb75797ae254b5643ca1b51

SHA512
f10d85b7b40e35d355620bc8c88a238be2d8f81876a61a366cfe74e749df4d46b64a19d869bcf15749cde0b3c8635a9ba82fa90645907db80720c5f3bbb8168f

Download Submit
memory/2628-18-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads