Analysis
-
max time kernel
195s -
max time network
208s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
13/10/2023, 17:48
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.NEASNEASac415f7a71918886fcb4a649cae87c925a953d361f3bc25d7fa1f6aed424b9fdexeexeexe_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.NEASNEASac415f7a71918886fcb4a649cae87c925a953d361f3bc25d7fa1f6aed424b9fdexeexeexe_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.NEASNEASac415f7a71918886fcb4a649cae87c925a953d361f3bc25d7fa1f6aed424b9fdexeexeexe_JC.exe
-
Size
4.9MB
-
MD5
d27d2fef44ee74e23dcb90c78bda9b35
-
SHA1
bdf9964d4c0069b03a02ccad5bfb7f2551e8c8cb
-
SHA256
ac415f7a71918886fcb4a649cae87c925a953d361f3bc25d7fa1f6aed424b9fd
-
SHA512
9bf9dfe20b956c3a8ff3b97e70531963ee2b7ca86df408108d27067679cbc73b6d84284473a4ae3d5d7585f1950ff632b9992c29c1997a9ea1587e6c5a4651f2
-
SSDEEP
98304:Nrvj0ufABJsozk7U2rZ0l7/bUqA0jLU7NnQcJLea0wa:50s0sI2rG/U7CcJ1d
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4396 NEAS.NEASNEASac415f7a71918886fcb4a649cae87c925a953d361f3bc25d7fa1f6aed424b9fdexeexeexe_JC.exe 4396 NEAS.NEASNEASac415f7a71918886fcb4a649cae87c925a953d361f3bc25d7fa1f6aed424b9fdexeexeexe_JC.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.NEASNEASac415f7a71918886fcb4a649cae87c925a953d361f3bc25d7fa1f6aed424b9fdexeexeexe_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.NEASNEASac415f7a71918886fcb4a649cae87c925a953d361f3bc25d7fa1f6aed424b9fdexeexeexe_JC.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4396