f96184467ae792ed48b0b64d7c8439976386130127f60826d095fd108bc511a8

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
15/10/2023, 14:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe
Size

154KB
MD5

7dfe44b8b304c60fad2c25b3274e50aa
SHA1

a8c1addbd843928a6dfa02353adfbb0be64e028b
SHA256

f96184467ae792ed48b0b64d7c8439976386130127f60826d095fd108bc511a8
SHA512

8154a68c06682a5fe2f7c0c04843077a01908534d7c8b46e3d83cc96156a2b788b4efe497284445791f62e2ae51edea5e879f69f8a01daa0b29989108d43d755
SSDEEP

3072:uJfuq8IzyLHID/p8iJDAAkRcZxChbfOyuPZKlseVX3a:uuq1yy/pjnkOx+O1KGN

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2284-0-0x0000000000400000-0x0000000000418000-memory.dmp	upx
behavioral1/files/0x0008000000016059-5.dat	upx
behavioral1/memory/2284-18-0x0000000000400000-0x0000000000418000-memory.dmp	upx

Drops file in Windows directory 16 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win32dc\Sims 2 patch.exe	NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe
File created	C:\Windows\win32dc\Sims 2(nocd).exe	NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe
File created	C:\Windows\win32dc\BattleField 1942 + fix.exe	NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe
File created	C:\Windows\win32dc\BattleField 1942 nocd.exe	NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe
File opened for modification	C:\Windows\win32dc\Quake3(trainer).exe	NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe
File opened for modification	C:\Windows\win32dc\Sims 2(nocd).exe	NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe
File created	C:\Windows\win32dc\Silent Hill 4(crack).exe	NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2(fix).exe	NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe
File created	C:\Windows\win32dc\Sims 2 patch.exe	NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942 nocd.exe	NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe
File created	C:\Windows\win32dc\DAoC_crack.exe	NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe
File opened for modification	C:\Windows\win32dc\DAoC cheat.exe	NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe
File created	C:\Windows\win32dc\Half-Life 2(fix).exe	NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe
File created	C:\Windows\win32dc\Quake3(trainer).exe	NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe
File opened for modification	C:\Windows\win32dc\Silent Hill 4(crack).exe	NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe
File created	C:\Windows\win32dc\DAoC cheat.exe	NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.7dfe44b8b304c60fad2c25b3274e50aa_JC.exe"
1⤵
- Drops file in Windows directory
PID:2284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\win32dc\BattleField 1942 nocd.exe

Filesize
157KB

MD5
ed0b37e5478217f425d450f6bfed8fc0

SHA1
4f148badd20515aa824ff65d885fe76252871cea

SHA256
1adb85c7a933c8331fd525ed5f8cccf1d1e80c5b3c6d4ed6e6362bc4d79c5610

SHA512
53a7eabe64f4ca511fc5d0a44648251f04d88d7a81c8a4adcd6a88736db2de45238e98bc4d2da18f55f3973b395d8b76403c51cd1ea02bdce79504b6590e90b5

Download Submit
memory/2284-0-0x0000000000400000-0x0000000000418000-memory.dmp

Filesize
96KB

Download
memory/2284-18-0x0000000000400000-0x0000000000418000-memory.dmp

Filesize
96KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads