Analysis

  • max time kernel
    138s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-10-2023 15:47

General

  • Target

    NEAS.1993c9e40d31631aeaedbf46c82af290_JC.dll

  • Size

    3.5MB

  • MD5

    1993c9e40d31631aeaedbf46c82af290

  • SHA1

    722c365cc321bed0a968a138f529b7204b24dc37

  • SHA256

    7520cb9170fca0f01f643c5fe5661f39421ea8d120a1e8fd2e8a387db6e7d3cc

  • SHA512

    1873885c6e3ebdb27902e6b79f8b99c9fd0ee4ad18a701e33b60569479379e2c79be1d05d6a9e04c35ee263f134b8c60ef5e02f3194d5fa113ee169459c3e613

  • SSDEEP

    49152:eKuYHsZ/r9kAZ/1IdGd7qQocoxgJDtJJCNe2IlhnClcCyMv+n:/uYH8//SKicDCVIPMv+n

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\NEAS.1993c9e40d31631aeaedbf46c82af290_JC.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1888-0-0x00007FF831590000-0x00007FF831591000-memory.dmp

    Filesize

    4KB

  • memory/1888-1-0x000002172E3C0000-0x000002172E48D000-memory.dmp

    Filesize

    820KB