Analysis
-
max time kernel
122s -
max time network
132s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
14-10-2023 17:53
General
-
Target
NEAS.44ff027e08c15905795fb591d5637710.exe
-
Size
987KB
-
MD5
44ff027e08c15905795fb591d5637710
-
SHA1
b398412f20ca525608a538b9809bb4aed313f2ab
-
SHA256
ca14fe361d17217965a7ec1ebcf2c930e52fd6f0f390f9494a24e4f26c454a72
-
SHA512
d892a6c17749075d65aa04d9e79010c2149f2bee639527584657c1e866e1b9a8da58fca890f0f4ffa471cf0264d05bbbe257c7b7713cb3bd48783b12c7733163
-
SSDEEP
12288:zaWzgMg7v3qnCiMErQohh0F4CCJ8lnyFQUvPh9gE4jL7gHa7JRvf2Eg8A2zoVRAj:2aHMv6CorjqnyFQSgE94K2kyJ
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 12 IoCs
-
Suspicious use of SendNotifyMessage 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.44ff027e08c15905795fb591d5637710.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.44ff027e08c15905795fb591d5637710.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage