Analysis
-
max time kernel
65s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
14/10/2023, 18:09
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.a85f62b87aae7e9f0f6ff5f3cf088bd0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.a85f62b87aae7e9f0f6ff5f3cf088bd0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.a85f62b87aae7e9f0f6ff5f3cf088bd0.exe
-
Size
139KB
-
MD5
a85f62b87aae7e9f0f6ff5f3cf088bd0
-
SHA1
9a891d44a2c3f7729923dc35a5f85063f41d1ff7
-
SHA256
c5ce57d073996bb94fa0bb53fba1835d65a7aa5debf8bae273d84ee23044088f
-
SHA512
98f9f785af7e4809886362be2af506c249fdd29c4522408fc536362c63d60593642ac09bda7e86c8bcd9aafd3ba49678a2aac0be150e64ac9a722c13a989787d
-
SSDEEP
3072:yi0FEplmmNJ/CHd6bOjU2GNUWdyeERIdbp1:+Er7J6rQ1NUWdyDR6
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 3348 cpuirzc.exe -
Drops file in Program Files directory 1 IoCs
description ioc Process File created C:\PROGRA~3\Mozilla\cpuirzc.exe NEAS.a85f62b87aae7e9f0f6ff5f3cf088bd0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.a85f62b87aae7e9f0f6ff5f3cf088bd0.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.a85f62b87aae7e9f0f6ff5f3cf088bd0.exe"1⤵
- Drops file in Program Files directory
PID:224
-
C:\PROGRA~3\Mozilla\cpuirzc.exeC:\PROGRA~3\Mozilla\cpuirzc.exe -yyraenb1⤵
- Executes dropped EXE
PID:3348
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
139KB
MD50f560d4b410f4bdee333ba2b2c603bfb
SHA130b151f249cbde941f2a5c78e3a3c184c24cec51
SHA256af531ac41eb776a4cfc63d052050ca26ecc8472d096a98414f3780b03400faca
SHA512c1ead63be5a44f2e354c077c90b67aa4528309b888de198d701d694d02e6196e4493d4770392fdf456e9ff1af401a03c3198acbd69ca7989390b17430e0233ce