Analysis

  • max time kernel
    141s
  • max time network
    135s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/10/2023, 21:19

General

  • Target

    NEAS.505f30847d7f2bdde1ae501a3fed96f0.exe

  • Size

    598KB

  • MD5

    505f30847d7f2bdde1ae501a3fed96f0

  • SHA1

    9a7cfc51e63229e83d37bbff69b7c9bfcd63b9ba

  • SHA256

    478f312a1b747395b969bf93145f1ff5c2c161434a16e8f16aea11db2db6b8d6

  • SHA512

    4658972fc3c3ca1513a878507138c568a367de0c00e409a5d107c6e7de2e5623e91e01c4619ac0c945f8f09b107dd41475654b7f175cbf61127f86a235b5d219

  • SSDEEP

    12288:L28y5wrgYZrQi3DRyGYhrDG0fh6sKs8nO4fZTtS8dToO3G3k0eoS:LM5wEYZtTUGYE0foMboZItOW3k

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.505f30847d7f2bdde1ae501a3fed96f0.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.505f30847d7f2bdde1ae501a3fed96f0.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2348

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2348-0-0x0000000000400000-0x0000000000650000-memory.dmp

          Filesize

          2.3MB

        • memory/2348-1-0x0000000000400000-0x0000000000650000-memory.dmp

          Filesize

          2.3MB

        • memory/2348-3-0x0000000000400000-0x0000000000650000-memory.dmp

          Filesize

          2.3MB

        • memory/2348-4-0x0000000000400000-0x0000000000650000-memory.dmp

          Filesize

          2.3MB

        • memory/2348-5-0x0000000000400000-0x0000000000650000-memory.dmp

          Filesize

          2.3MB