398c50a907b718abd49e13d2e561b9e8fe0181bf15c33c316844a0aad860b75f

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
13-10-2023 20:14

Target

NEAS.448d87935d280c5ea8a5ad608b2bf170.exe
Size

45KB
MD5

448d87935d280c5ea8a5ad608b2bf170
SHA1

1d5079fd7b13418cd71009110459c76c1c795248
SHA256

398c50a907b718abd49e13d2e561b9e8fe0181bf15c33c316844a0aad860b75f
SHA512

de0aa336e1b4616c7fc0b6aeabaff900d033c0944fff88fb4f64444c48cd95f5ebf843ef52896043018e786cd8b3675b0042ecf557b4fc01e4d59776ed03085a
SSDEEP

768:fllPp7JeTe5MLjH4B5NCPd7m+Z7hE6XmPkHledFCVzN7fpNWtBchcgEpGa:flEK5SYB5s1Zm6X1Fe4PK2cgAGa

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2288-0-0x0000000000400000-0x000000000041B000-memory.dmp	upx
behavioral1/files/0x00070000000170cc-5.dat	upx
behavioral1/memory/2288-102-0x0000000000400000-0x000000000041B000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	NEAS.448d87935d280c5ea8a5ad608b2bf170.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.448d87935d280c5ea8a5ad608b2bf170.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.448d87935d280c5ea8a5ad608b2bf170.exe"
1⤵
- Drops file in Windows directory
PID:2288

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Filesize
45KB

MD5
448d87935d280c5ea8a5ad608b2bf170

SHA1
1d5079fd7b13418cd71009110459c76c1c795248

SHA256
398c50a907b718abd49e13d2e561b9e8fe0181bf15c33c316844a0aad860b75f

SHA512
de0aa336e1b4616c7fc0b6aeabaff900d033c0944fff88fb4f64444c48cd95f5ebf843ef52896043018e786cd8b3675b0042ecf557b4fc01e4d59776ed03085a

Download Submit
memory/2288-0-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2288-102-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download