e146af0c30bbdca50746176006e8ec08066e1ed06bed55781226ed901372cf04

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
14/10/2023, 18:04

Target

NEAS.8b0ad4af440a6490de300554235444e0.exe
Size

114KB
MD5

8b0ad4af440a6490de300554235444e0
SHA1

60af53f11423decee8940f98c29c5bac91a4c430
SHA256

e146af0c30bbdca50746176006e8ec08066e1ed06bed55781226ed901372cf04
SHA512

03e1d0780e904e3b11d5ac8fe3fcfd464de0f226fbb3c9b46667ebba344907b427719761bd93478a58d069f38e4028747c30631e722a05e02bc4d4107fe964b1
SSDEEP

1536:YcbqyEk65QiMa2Zi2tSVG4FnjJdLl19/Gm6XB+Fe4PK1hWBV:7LSQilNIHujLl19/Gm6XB+NPK1hWBV

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2456-0-0x0000000000400000-0x000000000041C000-memory.dmp	upx
behavioral1/files/0x000700000001608b-5.dat	upx
behavioral1/memory/2456-102-0x0000000000400000-0x000000000041C000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	NEAS.8b0ad4af440a6490de300554235444e0.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.8b0ad4af440a6490de300554235444e0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.8b0ad4af440a6490de300554235444e0.exe"
1⤵
- Drops file in Windows directory
PID:2456

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Filesize
114KB

MD5
8b0ad4af440a6490de300554235444e0

SHA1
60af53f11423decee8940f98c29c5bac91a4c430

SHA256
e146af0c30bbdca50746176006e8ec08066e1ed06bed55781226ed901372cf04

SHA512
03e1d0780e904e3b11d5ac8fe3fcfd464de0f226fbb3c9b46667ebba344907b427719761bd93478a58d069f38e4028747c30631e722a05e02bc4d4107fe964b1

Download Submit
memory/2456-0-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download
memory/2456-102-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download