Analysis

  • max time kernel
    6s
  • max time network
    10s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/10/2023, 17:16

General

  • Target

    NEAS.2fc4e744f73a582cbdd2c13df9fc25c0.exe

  • Size

    148KB

  • MD5

    2fc4e744f73a582cbdd2c13df9fc25c0

  • SHA1

    beebda2eb7f038e2ea313aebcc382bf42a119945

  • SHA256

    0752357da2d80f4cd7123791eadab022e9396ef5213ae9da1a9202905fd61062

  • SHA512

    f3c645b89ce50bb28dda3e799991b06f7d56db97d9a10ea9ec17ea92783d8c1c4c768fdcc20eab4677be7b751ac6abd7f4117807c519d29f8326d317ddd2896d

  • SSDEEP

    3072:SZwhLsm0Mo2dDIpgwFdzk+I+oXzWe2/iBYiHvXG+gMvcahKX4A:SZwhBTpdDImk2+vC2/9UtvcvXx

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in Program Files directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.2fc4e744f73a582cbdd2c13df9fc25c0.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.2fc4e744f73a582cbdd2c13df9fc25c0.exe"
    1⤵
    • Drops file in Program Files directory
    PID:4928
  • C:\PROGRA~3\Mozilla\acwxofj.exe
    C:\PROGRA~3\Mozilla\acwxofj.exe -stamzkg
    1⤵
    • Executes dropped EXE
    PID:3804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\PROGRA~3\Mozilla\acwxofj.exe

    Filesize

    148KB

    MD5

    da20ea2c839b092f75dfddfc4819d184

    SHA1

    08f142dae83fafc5098a6d72e6f36eb298258828

    SHA256

    9a05ca6206539513765c04a290c38f421971647881f1b05ef5b21ae5a8ba4eab

    SHA512

    d21eedaf8ef1a17f41d4503e474db1ca9fd8b7e3ee4fdab561a9674ef689e3c288323280699fa39a263e3c891f1ae6a99f1a6f2638846ac023ef7c94c023ddec

  • C:\ProgramData\Mozilla\acwxofj.exe

    Filesize

    148KB

    MD5

    da20ea2c839b092f75dfddfc4819d184

    SHA1

    08f142dae83fafc5098a6d72e6f36eb298258828

    SHA256

    9a05ca6206539513765c04a290c38f421971647881f1b05ef5b21ae5a8ba4eab

    SHA512

    d21eedaf8ef1a17f41d4503e474db1ca9fd8b7e3ee4fdab561a9674ef689e3c288323280699fa39a263e3c891f1ae6a99f1a6f2638846ac023ef7c94c023ddec

  • memory/3804-10-0x00000000001C0000-0x00000000001C2000-memory.dmp

    Filesize

    8KB

  • memory/3804-11-0x0000000000720000-0x000000000077B000-memory.dmp

    Filesize

    364KB

  • memory/4928-0-0x0000000000400000-0x000000000045D000-memory.dmp

    Filesize

    372KB

  • memory/4928-1-0x00000000001C0000-0x00000000001C2000-memory.dmp

    Filesize

    8KB

  • memory/4928-2-0x00000000020F0000-0x000000000214B000-memory.dmp

    Filesize

    364KB

  • memory/4928-3-0x0000000000400000-0x000000000045B000-memory.dmp

    Filesize

    364KB

  • memory/4928-7-0x0000000000400000-0x000000000045B000-memory.dmp

    Filesize

    364KB

  • memory/4928-9-0x00000000020F0000-0x000000000214B000-memory.dmp

    Filesize

    364KB