f6018197243fa69096e24bd384f1ce5edcb71dd4e549aa077a920511a536a075

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
22-10-2023 13:08

Target

NEAS.fd3cb8ce797937a21dbc70080a6575e0_JC.exe
Size

198KB
MD5

fd3cb8ce797937a21dbc70080a6575e0
SHA1

c7d78a4fde3b495955be9f70f34462dcff3c61bc
SHA256

f6018197243fa69096e24bd384f1ce5edcb71dd4e549aa077a920511a536a075
SHA512

9f219b6895b0deae3c1fc7df18480c1bfbd85a0cdd5280c786a95a1ff204f5929109b4c0088726619c463df29eb53dc5b431fa0688dbad9bf684bbb48d40b6c4
SSDEEP

3072:IZTseF1YqzI0B0UWTnlT4y1ci96rre8M8uTzSFk6b4kf2EPQNm1XjFZTK8kIlNyD:+su1YDl4Ji96fO3TmfMkf5QNm9jFbX4v

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2152-0-0x0000000000400000-0x00000000004A4000-memory.dmp	upx
behavioral1/files/0x00070000000142cd-5.dat	upx
behavioral1/memory/2152-102-0x0000000000400000-0x00000000004A4000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	NEAS.fd3cb8ce797937a21dbc70080a6575e0_JC.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.fd3cb8ce797937a21dbc70080a6575e0_JC.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.fd3cb8ce797937a21dbc70080a6575e0_JC.exe"
1⤵
- Drops file in Windows directory
PID:2152

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Filesize
198KB

MD5
fd3cb8ce797937a21dbc70080a6575e0

SHA1
c7d78a4fde3b495955be9f70f34462dcff3c61bc

SHA256
f6018197243fa69096e24bd384f1ce5edcb71dd4e549aa077a920511a536a075

SHA512
9f219b6895b0deae3c1fc7df18480c1bfbd85a0cdd5280c786a95a1ff204f5929109b4c0088726619c463df29eb53dc5b431fa0688dbad9bf684bbb48d40b6c4

Download Submit
memory/2152-0-0x0000000000400000-0x00000000004A4000-memory.dmp

Filesize
656KB

Download
memory/2152-102-0x0000000000400000-0x00000000004A4000-memory.dmp

Filesize
656KB

Download