Analysis
-
max time kernel
139s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
21/10/2023, 21:31
General
-
Target
NEAS.c4bd17f5de952f49af8d64eae3688660.exe
-
Size
1.4MB
-
MD5
c4bd17f5de952f49af8d64eae3688660
-
SHA1
e20a87e9935e2face47034b568db736d8e69d703
-
SHA256
51310ad4d35a3f84694de23261d1b55120a87337bc843d9c7675fe4825dc83fa
-
SHA512
8421f79e4d9ada8b1ed506d378a4d4cd21f2e3b6887849ebb613e18d1eb628f9759ee32c4d9357798e067dfef5f7acef04a62d43ad2e0730c1bdbbdc47610ba1
-
SSDEEP
24576:9u4cdsJVx1G2Wd34zlAXK8t4Y8SAVRXdaaOCmfEnSdygP+Y:5G3sqXK9dXifU4Pv
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.c4bd17f5de952f49af8d64eae3688660.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.c4bd17f5de952f49af8d64eae3688660.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx