Analysis
-
max time kernel
141s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
22-10-2023 17:33
Behavioral task
behavioral1
Sample
NEAS.f5852497e87b7eda68d52228a8601470.exe
Resource
win7-20231020-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.f5852497e87b7eda68d52228a8601470.exe
Resource
win10v2004-20231020-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
NEAS.f5852497e87b7eda68d52228a8601470.exe
-
Size
148KB
-
MD5
f5852497e87b7eda68d52228a8601470
-
SHA1
e804abf699b17a846fb55a85ee7a7605e18045f2
-
SHA256
11d4b9663bb6b1eae21b9d8f8500213e0f2bf0c9ee636a52e144915915b8995a
-
SHA512
43a008cf7a09a4eee926108a2b282f85a2886e9fdf04f4bf8a25956e78e075885f4b04c2e3aa83ecb10af874a527d1e1da8017587c6bf137c218927f00271f96
-
SSDEEP
3072:0qRVmxZC7r6alfFAuoMSjuJsLL0MD2UAO8GNpE9IkN9eKp:0qRVmO7r6alfFAuopuGa7GNy9Ik/n
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1908-0-0x0000000000400000-0x000000000041D000-memory.dmp upx behavioral2/memory/1908-2-0x0000000000400000-0x000000000041D000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1908 NEAS.f5852497e87b7eda68d52228a8601470.exe 1908 NEAS.f5852497e87b7eda68d52228a8601470.exe 1908 NEAS.f5852497e87b7eda68d52228a8601470.exe 1908 NEAS.f5852497e87b7eda68d52228a8601470.exe