Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    22-10-2023 17:27

General

  • Target

    NEAS.c8dd0f3040b1502411a14278b1133d50.exe

  • Size

    52KB

  • MD5

    c8dd0f3040b1502411a14278b1133d50

  • SHA1

    9e8590a89aeabf4b4f9f6e3a685c10ace5194782

  • SHA256

    72e15d53d0e168f2fe54c9096e3496473a7e811be9f3af66376c185c747bc3c3

  • SHA512

    d18eda6518533580342e90b9350e773e1801166a6298eaee0e5da40162d851b331d361524f3d72e67ca9435ef41c203d7f46593c20c79fdd30d21321e4f92b21

  • SSDEEP

    384:/TuvPq/bLPCJoORkoFZiWUqL5++WR242/iE8ELQARYaA/VLHqWJVBqdFDLF85SfF:/KvPqT2fKeiWJo+W4/irCWJVBd5Sfs

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.c8dd0f3040b1502411a14278b1133d50.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.c8dd0f3040b1502411a14278b1133d50.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\CloneF_4.exe

    Filesize

    52KB

    MD5

    540c0a009e202d4b6d527cda2e7136f6

    SHA1

    ef05277c73e9f041b68925d738891c1cc10d4742

    SHA256

    128ba56bf972612b44de0feed7a13c9fc5437af5c7f1b4322b7739e0c183d43d

    SHA512

    d0f8dbd1cade96e31c476fb477e2cc008a5466f22d2bc0ab94f2ad7378847fc798cf2e9be561aae38c5280bf3959564707d8c64edd980a3525e2fe262dd54594