ec1ed6f4e3432ab845124fdbdcfb40f29f544db10d07555a277bd424faf2fd69 | Triage

Analysis

max time kernel
154s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
14-10-2023 17:56

Sharing

Report Analysis Logs

General

Target

NEAS.5b4e66b0aef133ea6332b4b65fd582a0.exe
Size

5KB
MD5

5b4e66b0aef133ea6332b4b65fd582a0
SHA1

410ee739d18398e4ef2a3fec6606027f504f1def
SHA256

ec1ed6f4e3432ab845124fdbdcfb40f29f544db10d07555a277bd424faf2fd69
SHA512

8cd1d8580b4f310bcdd2d42dffb993de6ae0bf6c4a60fdd16fc56a2f132c480c959834a73431d6317d32020c7b4e8c0d8853c405de96623479dac96c33e941c5
SSDEEP

96:gtHPdX4hPmIWSf1q980dO2Tr+2i8Aor3:KVXbH80dOP2i8Aor3

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3684 wrote to memory of 2036	3684	NEAS.5b4e66b0aef133ea6332b4b65fd582a0.exe	87
PID 3684 wrote to memory of 2036	3684	NEAS.5b4e66b0aef133ea6332b4b65fd582a0.exe	87

C:\Users\Admin\AppData\Local\Temp\NEAS.5b4e66b0aef133ea6332b4b65fd582a0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.5b4e66b0aef133ea6332b4b65fd582a0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3684
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\20231015T043825_362.exe
  2⤵
  PID:2036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads