5a3a84afd81ead808ebd10c9cd4646720292741270786c7600fc38697bf84a7d

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
13/10/2023, 20:43

Target

NEAS.d295061dd12edb8021c85c278edd1060.exe
Size

173KB
MD5

d295061dd12edb8021c85c278edd1060
SHA1

f2b2277d20171518cfe829c0616cbc1c0afcc6db
SHA256

5a3a84afd81ead808ebd10c9cd4646720292741270786c7600fc38697bf84a7d
SHA512

d47251dc0b0c13d6630311bd8708e81e668befc3f1dd37a9f879b07f06542f17af37dfd564341baf9f5bc17bcec3abeda2f7fb306d16f958f86cb4b3c2e66835
SSDEEP

3072:SxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tAvdqkzk6t5uYDiEv:U2pdqfv2IPOGfXf5ovWvdNk6rreEv

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1708-0-0x0000000000400000-0x0000000000429000-memory.dmp	upx
behavioral1/files/0x0007000000016466-5.dat	upx
behavioral1/memory/1708-102-0x0000000000400000-0x0000000000429000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\driv64.exe	NEAS.d295061dd12edb8021c85c278edd1060.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.d295061dd12edb8021c85c278edd1060.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.d295061dd12edb8021c85c278edd1060.exe"
1⤵
- Drops file in Windows directory
PID:1708

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Filesize
173KB

MD5
d295061dd12edb8021c85c278edd1060

SHA1
f2b2277d20171518cfe829c0616cbc1c0afcc6db

SHA256
5a3a84afd81ead808ebd10c9cd4646720292741270786c7600fc38697bf84a7d

SHA512
d47251dc0b0c13d6630311bd8708e81e668befc3f1dd37a9f879b07f06542f17af37dfd564341baf9f5bc17bcec3abeda2f7fb306d16f958f86cb4b3c2e66835

Download Submit
memory/1708-0-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download
memory/1708-102-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download