20034ef04517144d28c2cabdc2cae05186cb16ad0efa9feed7e975e33ae95289

Analysis

max time kernel
117s
max time network
124s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
13/10/2023, 15:37

Target

NEAS.03a287e57dd5bbe1843f91d07a6b3810_JC.exe
Size

180KB
MD5

03a287e57dd5bbe1843f91d07a6b3810
SHA1

66ad8c2e496297051c9a128d1c8dc733d071e7cb
SHA256

20034ef04517144d28c2cabdc2cae05186cb16ad0efa9feed7e975e33ae95289
SHA512

3b3a6646de2c761294ac6c957449e4ef82312d78fd72d6862d052613fab586bc00d5006b7b4709b90d66314765af16ce791c7723cdbeb68e421a9e7f0f4ee1ee
SSDEEP

3072:tHPxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tA3ZPkz13L5ctvK:t52pdqfv2IPOGfXf5ovWJy136M

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/3056-0-0x0000000000400000-0x0000000000429000-memory.dmp	upx
behavioral1/files/0x0007000000015d33-5.dat	upx
behavioral1/memory/3056-102-0x0000000000400000-0x0000000000429000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	NEAS.03a287e57dd5bbe1843f91d07a6b3810_JC.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.03a287e57dd5bbe1843f91d07a6b3810_JC.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.03a287e57dd5bbe1843f91d07a6b3810_JC.exe"
1⤵
- Drops file in Windows directory
PID:3056

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Filesize
180KB

MD5
03a287e57dd5bbe1843f91d07a6b3810

SHA1
66ad8c2e496297051c9a128d1c8dc733d071e7cb

SHA256
20034ef04517144d28c2cabdc2cae05186cb16ad0efa9feed7e975e33ae95289

SHA512
3b3a6646de2c761294ac6c957449e4ef82312d78fd72d6862d052613fab586bc00d5006b7b4709b90d66314765af16ce791c7723cdbeb68e421a9e7f0f4ee1ee

Download Submit
memory/3056-0-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download
memory/3056-102-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download