Analysis
-
max time kernel
154s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
14/10/2023, 08:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.e412f2cf5e18e8154d55b467d66b0b60.exe
Resource
win7-20230831-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.e412f2cf5e18e8154d55b467d66b0b60.exe
Resource
win10v2004-20230915-en
2 signatures
150 seconds
General
-
Target
NEAS.e412f2cf5e18e8154d55b467d66b0b60.exe
-
Size
1.3MB
-
MD5
e412f2cf5e18e8154d55b467d66b0b60
-
SHA1
b3ea494c6dc99e3a45137899d10042aee849cf13
-
SHA256
08d22e1c50c0c497dc941345b0afb618cbe352f5db4f280bc18e7859cac1021e
-
SHA512
a10f339d9e610c3b412b1db5de52a8282665ad3555539c7de12886cbe1ff3b5d59644ef79af3b3302eb46b2011e31707bc8d800dd656c917086b20536e33ab56
-
SSDEEP
12288:UwXAwhB2HMavqZLaOKbTAhjZym4VOBrEAMCiD6r+L7txfXit2bbI0Myf:HQwhB2biZHKbYYm4sCDnLhxqtfe
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe NEAS.e412f2cf5e18e8154d55b467d66b0b60.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 1140 NEAS.e412f2cf5e18e8154d55b467d66b0b60.exe