Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
13/10/2023, 19:46
General
-
Target
NEAS.1b1ded376e4506b6d14076b3f6ef5dd0.dll
-
Size
29KB
-
MD5
1b1ded376e4506b6d14076b3f6ef5dd0
-
SHA1
a511a966c1ed77c0a83d16314dfaa910e01a7fdc
-
SHA256
d175edae82e3eb5f66a53f9384de0183fabd6ce9007672cb41688f29fc392b82
-
SHA512
edcbcdc2375b900cdb9fab8d56038afa506c3a5e55497f4096dad7ef0c891571fe25e16e94a24e6fe78a77afad52703155b402d8b51ecb0e2b6b555db9187364
-
SSDEEP
384:/i3WlhWUyAA0GftpBjq1/qqg6x15l2wwi8OIunFWlwwwlJCejOJf7niPKOIim/T1:/iiDiM1/RgY1yw+gFWlE6eojiTZKT1
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\NEAS.1b1ded376e4506b6d14076b3f6ef5dd0.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB