Analysis
-
max time kernel
151s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
16-10-2023 18:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe
Resource
win7-20230831-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe
-
Size
171KB
-
MD5
bd12ec1f0a8fab74de676756b8c483f0
-
SHA1
8e02536dc2dc97012f69c0657bf3724588fcda28
-
SHA256
5db43280439e9063fc2d93413f5025fda76a357082a252ca1b2c05d9f3858b64
-
SHA512
aefdaca0549d627226a0431e8acd3fca919de3897544e8de2175c67bb8f261bd928923a17e3dc1a70fcff4db805ae49c21f8722cc44562bdd5d961a55c8dd8af
-
SSDEEP
3072:vYrY3cPD/CZauz8bDbOs7hj/0mxaXvsmtb7pjTBtfywec1LecTmYD:wrY3cgz8bDR7J/0mxaXvsmtb7pjTBtfM
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4712 NEAS.bd12ec1f0a8fab74de676756b8c483f0.exe