Analysis

  • max time kernel
    195s
  • max time network
    208s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/10/2023, 17:48

General

  • Target

    NEAS.NEASNEASac415f7a71918886fcb4a649cae87c925a953d361f3bc25d7fa1f6aed424b9fdexeexeexe_JC.exe

  • Size

    4.9MB

  • MD5

    d27d2fef44ee74e23dcb90c78bda9b35

  • SHA1

    bdf9964d4c0069b03a02ccad5bfb7f2551e8c8cb

  • SHA256

    ac415f7a71918886fcb4a649cae87c925a953d361f3bc25d7fa1f6aed424b9fd

  • SHA512

    9bf9dfe20b956c3a8ff3b97e70531963ee2b7ca86df408108d27067679cbc73b6d84284473a4ae3d5d7585f1950ff632b9992c29c1997a9ea1587e6c5a4651f2

  • SSDEEP

    98304:Nrvj0ufABJsozk7U2rZ0l7/bUqA0jLU7NnQcJLea0wa:50s0sI2rG/U7CcJ1d

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.NEASNEASac415f7a71918886fcb4a649cae87c925a953d361f3bc25d7fa1f6aed424b9fdexeexeexe_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.NEASNEASac415f7a71918886fcb4a649cae87c925a953d361f3bc25d7fa1f6aed424b9fdexeexeexe_JC.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4396-0-0x0000000001540000-0x0000000001541000-memory.dmp

    Filesize

    4KB

  • memory/4396-2-0x00000000004A0000-0x0000000000D06000-memory.dmp

    Filesize

    8.4MB

  • memory/4396-3-0x0000000001580000-0x0000000001581000-memory.dmp

    Filesize

    4KB

  • memory/4396-1-0x0000000001550000-0x0000000001551000-memory.dmp

    Filesize

    4KB

  • memory/4396-5-0x00000000004A0000-0x0000000000D06000-memory.dmp

    Filesize

    8.4MB

  • memory/4396-4-0x0000000003030000-0x0000000003031000-memory.dmp

    Filesize

    4KB

  • memory/4396-6-0x0000000003040000-0x0000000003041000-memory.dmp

    Filesize

    4KB

  • memory/4396-7-0x0000000003050000-0x0000000003051000-memory.dmp

    Filesize

    4KB

  • memory/4396-11-0x00000000004A0000-0x0000000000D06000-memory.dmp

    Filesize

    8.4MB