f3adfd888bdc963a23b769a364231e3d12a645fb01f02c1e096f5b7a513236ef

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
16/10/2023, 18:23

Target

NEAS.691ed794633f2e7717ffe146dce40650.exe
Size

233KB
MD5

691ed794633f2e7717ffe146dce40650
SHA1

ea60459192a66a21708d1911b04a711d00da2103
SHA256

f3adfd888bdc963a23b769a364231e3d12a645fb01f02c1e096f5b7a513236ef
SHA512

590365a921303739d2cbe071889126f309700b6caa70f078dec8aeb403ad5e9d34aebe7c2517e698d6f09f22c62ca44e67b3431ba8e303f0198c871ce2be45da
SSDEEP

6144:2su1YDl4Ji96fO3TmfMkf5QNm9jFbX4Bn:2rK4JnfO3qfv5X9jFDyn

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x0006000000018675-4.dat	upx
behavioral1/memory/1736-8-0x0000000000400000-0x00000000004A4000-memory.dmp	upx
behavioral1/memory/1736-102-0x0000000000400000-0x00000000004A4000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	NEAS.691ed794633f2e7717ffe146dce40650.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.691ed794633f2e7717ffe146dce40650.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.691ed794633f2e7717ffe146dce40650.exe"
1⤵
- Drops file in Windows directory
PID:1736

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Filesize
233KB

MD5
691ed794633f2e7717ffe146dce40650

SHA1
ea60459192a66a21708d1911b04a711d00da2103

SHA256
f3adfd888bdc963a23b769a364231e3d12a645fb01f02c1e096f5b7a513236ef

SHA512
590365a921303739d2cbe071889126f309700b6caa70f078dec8aeb403ad5e9d34aebe7c2517e698d6f09f22c62ca44e67b3431ba8e303f0198c871ce2be45da

Download Submit
memory/1736-8-0x0000000000400000-0x00000000004A4000-memory.dmp

Filesize
656KB

Download
memory/1736-102-0x0000000000400000-0x00000000004A4000-memory.dmp

Filesize
656KB

Download