ff4fa5a0f65dda16e788df46e4a0be5bfa90150a0a1c87e3dd076d1427cdf1c4

Analysis

max time kernel
146s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
16/10/2023, 18:35

Target

NEAS.be4e4a5fafa3825638481e494da2ca10.exe
Size

109KB
MD5

be4e4a5fafa3825638481e494da2ca10
SHA1

f6291db92bdfac7b635ca39f416b1df61cff965e
SHA256

ff4fa5a0f65dda16e788df46e4a0be5bfa90150a0a1c87e3dd076d1427cdf1c4
SHA512

59154d85ff9e34d1358d4d2665a75025cb6a246e3f3130032d4570dcc0d6bccf4196ae5410f41322b834cf20e66b2f0eb0162e09cbb6598505e1fa04144cc3ec
SSDEEP

1536:YcbqyEk65QiMa2Zi2tSVG4FnjJdLl19/Gm6XB+Fe4PKK:7LSQilNIHujLl19/Gm6XB+NPKK

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3140-0-0x0000000000400000-0x000000000041C000-memory.dmp	upx
behavioral2/files/0x00070000000231f4-5.dat	upx
behavioral2/memory/3140-102-0x0000000000400000-0x000000000041C000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	NEAS.be4e4a5fafa3825638481e494da2ca10.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.be4e4a5fafa3825638481e494da2ca10.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.be4e4a5fafa3825638481e494da2ca10.exe"
1⤵
- Drops file in Windows directory
PID:3140

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Filesize
109KB

MD5
be4e4a5fafa3825638481e494da2ca10

SHA1
f6291db92bdfac7b635ca39f416b1df61cff965e

SHA256
ff4fa5a0f65dda16e788df46e4a0be5bfa90150a0a1c87e3dd076d1427cdf1c4

SHA512
59154d85ff9e34d1358d4d2665a75025cb6a246e3f3130032d4570dcc0d6bccf4196ae5410f41322b834cf20e66b2f0eb0162e09cbb6598505e1fa04144cc3ec

Download Submit
memory/3140-0-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download
memory/3140-102-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download