Analysis

  • max time kernel
    142s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/10/2023, 20:38

General

  • Target

    NEAS.beeb6a5d7b8c2a01c1a7f7a53fe55040.dll

  • Size

    56KB

  • MD5

    beeb6a5d7b8c2a01c1a7f7a53fe55040

  • SHA1

    1879d30fc2497c328332e914f90ded882a896902

  • SHA256

    0ec57f96c4fb0d978b86e33e44b698ab2c55817e31f4ab13f035dbb491a7599e

  • SHA512

    a97caf6572854649eff5ac9d3618042b2852aed54f19e30d93774b7fdf431baed4e47da405c4bf523177d36f855918214d7aa3b8b9d4e2049324756ddd873782

  • SSDEEP

    1536:T+av6qZ4QxpP0AtNfRJ5BHxYkr8lGfJ8YXljnouy8UiZDBN:7P4acCJJvHxYkr8l2JbboutUUD

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\NEAS.beeb6a5d7b8c2a01c1a7f7a53fe55040.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3348
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\NEAS.beeb6a5d7b8c2a01c1a7f7a53fe55040.dll,#1
      2⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:1796

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads