1046c4f25d9ce83bd8cbfdab5fec6608b7e9af738fb75797ae254b5643ca1b51

Analysis

max time kernel
70s
max time network
201s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
12/10/2023, 16:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
Size

76KB
MD5

0e19f0f2db23710881eb2523a4fa3517
SHA1

6a5fbca3b4f89986945f75a8009930b5d0ddec7a
SHA256

1046c4f25d9ce83bd8cbfdab5fec6608b7e9af738fb75797ae254b5643ca1b51
SHA512

f10d85b7b40e35d355620bc8c88a238be2d8f81876a61a366cfe74e749df4d46b64a19d869bcf15749cde0b3c8635a9ba82fa90645907db80720c5f3bbb8168f
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzGvxuJ+o:lV2BZVPlFlnxClFvLLcA+sPDzGvxy+o

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 19 IoCs

description	ioc	Process
File created	C:\Windows\win32dc\FlatOut cheat.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File opened for modification	C:\Windows\win32dc\Quake3 + trainer.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File created	C:\Windows\win32dc\Quake3 + codes.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File opened for modification	C:\Windows\win32dc\Quake3 + codes.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File created	C:\Windows\win32dc\DAoC_cdfix.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File opened for modification	C:\Windows\win32dc\DAoC_cdfix.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File created	C:\Windows\win32dc\Counter-Strike cheat.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File opened for modification	C:\Windows\win32dc\Sims 2_nocd.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File opened for modification	C:\Windows\win32dc\Quake3(nocd).exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File created	C:\Windows\win32dc\Sims 2_nocd.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File created	C:\Windows\win32dc\Quake3 + trainer.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File created	C:\Windows\win32dc\UT2004(trainer).exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File opened for modification	C:\Windows\win32dc\Doom 3 + hack.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File opened for modification	C:\Windows\win32dc\Counter-Strike cheat.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942 serial.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File created	C:\Windows\win32dc\BattleField 1942 serial.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File created	C:\Windows\win32dc\Doom 3 + hack.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File created	C:\Windows\win32dc\Quake3(nocd).exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
File opened for modification	C:\Windows\win32dc\FlatOut cheat.exe	NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.0e19f0f2db23710881eb2523a4fa3517_JC.exe"
1⤵
- Drops file in Windows directory
PID:1712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\win32dc\BattleField 1942 serial.exe

Filesize
80KB

MD5
3472ec997fba6c69e6bc2fd806712dde

SHA1
5dc50052f37894141d44137e15ff47ee032d1542

SHA256
43e6b44ddf604e60e6bf8332903ee587a89491bfdcb63bee58f397a191d047f7

SHA512
2a69a797da2d9f4abf54ae02349c9e20cbe582e7f85cb5eb6d2023bc0fa60e75288771d345cb171515cf5ef4463b2f6afe51b47bfa231cdde02996a4f773e435

Download Submit
memory/1712-18-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads