Analysis
-
max time kernel
150s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
13/10/2023, 20:34
General
-
Target
NEAS.ac841f1bbe4a4fc89be21c213ff37c50.exe
-
Size
360KB
-
MD5
ac841f1bbe4a4fc89be21c213ff37c50
-
SHA1
1ee6dd8bd9e4d9547ed17e22db4bb032d686377e
-
SHA256
1de14a4c5def12562f271f900cd972e564f9b064c33499a2663006fbc3aefa25
-
SHA512
680f11b8e787c744c7e0334f9a904fe50025278ef59ad9d3fe5732fcc5e9aa607ecaaff677fe00f2bb7ae0a867ddd6e5df5987b6548348d22e824acf90969904
-
SSDEEP
6144:5hqubAERRedLzVxwl0888U/Ob+50jFZ3mRV6OrCSy78cVhAbLYh:Pqu8oRedHVOl0888U/Oy5+26QiDD
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.ac841f1bbe4a4fc89be21c213ff37c50.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.ac841f1bbe4a4fc89be21c213ff37c50.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
258KB
MD59225cd6a93a735e7561f0276ce9e6b9c
SHA179172d1ceba038b651bd31ca5e0f81070a6e5cf2
SHA25638f980db7e6a55d8a7a1f4d7cc1cfd973a516dd25f3b4d6d969ca4b5b114a025
SHA512d364a86a7fde64186684d390df3985032b6afb2fced95dd3bc42356f35465b04360933289392a2a249de1b0cab0d7c5666302e7c1db449534e5cb1a1db392a0e
-
Filesize
258KB
MD59225cd6a93a735e7561f0276ce9e6b9c
SHA179172d1ceba038b651bd31ca5e0f81070a6e5cf2
SHA25638f980db7e6a55d8a7a1f4d7cc1cfd973a516dd25f3b4d6d969ca4b5b114a025
SHA512d364a86a7fde64186684d390df3985032b6afb2fced95dd3bc42356f35465b04360933289392a2a249de1b0cab0d7c5666302e7c1db449534e5cb1a1db392a0e
-
Filesize
280KB
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
40KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
408KB
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB