b4593cd516f9f096f7a5cf81331228649d859c2d7c0a7fa05298decfa8715af2

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
16/10/2023, 18:18

Target

NEAS.3f1bc62708d1e59dfdaaeabd23029500.exe
Size

227KB
MD5

3f1bc62708d1e59dfdaaeabd23029500
SHA1

c55388364e4de7aa191c3ed848db22fcd9b7ba11
SHA256

b4593cd516f9f096f7a5cf81331228649d859c2d7c0a7fa05298decfa8715af2
SHA512

a31641a5f5a8902749925b71334e82c78e494c01102adec4fb763c5a6f89c949bea0625d35f2f203a5927c899f3e81c6cb04ab402f6efb340ac0c9c8ba8cb406
SSDEEP

6144:+su1YDl4Ji96fO3TmfMkf5QNm9jFbX4ZtC:+rK4JnfO3qfv5X9jFDWtC

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/3028-0-0x0000000000400000-0x00000000004A4000-memory.dmp	upx
behavioral1/files/0x0007000000015caa-5.dat	upx
behavioral1/memory/3028-102-0x0000000000400000-0x00000000004A4000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	NEAS.3f1bc62708d1e59dfdaaeabd23029500.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.3f1bc62708d1e59dfdaaeabd23029500.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.3f1bc62708d1e59dfdaaeabd23029500.exe"
1⤵
- Drops file in Windows directory
PID:3028

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Filesize
227KB

MD5
3f1bc62708d1e59dfdaaeabd23029500

SHA1
c55388364e4de7aa191c3ed848db22fcd9b7ba11

SHA256
b4593cd516f9f096f7a5cf81331228649d859c2d7c0a7fa05298decfa8715af2

SHA512
a31641a5f5a8902749925b71334e82c78e494c01102adec4fb763c5a6f89c949bea0625d35f2f203a5927c899f3e81c6cb04ab402f6efb340ac0c9c8ba8cb406

Download Submit
memory/3028-0-0x0000000000400000-0x00000000004A4000-memory.dmp

Filesize
656KB

Download
memory/3028-102-0x0000000000400000-0x00000000004A4000-memory.dmp

Filesize
656KB

Download