Analysis
-
max time kernel
164s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
14-10-2023 17:59
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.766dd94a9cc5996d26e95876f8f58100.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.766dd94a9cc5996d26e95876f8f58100.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.766dd94a9cc5996d26e95876f8f58100.exe
-
Size
456KB
-
MD5
766dd94a9cc5996d26e95876f8f58100
-
SHA1
2352c01b1aaecb5983b178437a828e1fa4b52f1b
-
SHA256
7f5958ba4e2e557c2f884bbdffcc809eeb695c351f51519eb16dd8d38067afa7
-
SHA512
05c51de2b9eb98b1815cd8715e8d7a6e7abd281e849c20146c0efb958260b6f728812a6069cd89be282575908acdfd9740c1aa1cf585cec90b08129b8ce65990
-
SSDEEP
6144:GpAaHn9qqNebqwqruKVph0Zsh8uc6+PpmTFfNJMcwRcaIxiXKWfN1diQlHEWHi09:mdZkqhrueWsh1TZ4b/g6kyQ2
Malware Config
Signatures
-
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NEAS.766dd94a9cc5996d26e95876f8f58100.lnk NEAS.766dd94a9cc5996d26e95876f8f58100.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).