Analysis
-
max time kernel
6s -
max time network
10s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
22/10/2023, 17:16
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2fc4e744f73a582cbdd2c13df9fc25c0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.2fc4e744f73a582cbdd2c13df9fc25c0.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.2fc4e744f73a582cbdd2c13df9fc25c0.exe
-
Size
148KB
-
MD5
2fc4e744f73a582cbdd2c13df9fc25c0
-
SHA1
beebda2eb7f038e2ea313aebcc382bf42a119945
-
SHA256
0752357da2d80f4cd7123791eadab022e9396ef5213ae9da1a9202905fd61062
-
SHA512
f3c645b89ce50bb28dda3e799991b06f7d56db97d9a10ea9ec17ea92783d8c1c4c768fdcc20eab4677be7b751ac6abd7f4117807c519d29f8326d317ddd2896d
-
SSDEEP
3072:SZwhLsm0Mo2dDIpgwFdzk+I+oXzWe2/iBYiHvXG+gMvcahKX4A:SZwhBTpdDImk2+vC2/9UtvcvXx
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 3804 acwxofj.exe -
Drops file in Program Files directory 1 IoCs
description ioc Process File created C:\PROGRA~3\Mozilla\acwxofj.exe NEAS.2fc4e744f73a582cbdd2c13df9fc25c0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.2fc4e744f73a582cbdd2c13df9fc25c0.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.2fc4e744f73a582cbdd2c13df9fc25c0.exe"1⤵
- Drops file in Program Files directory
PID:4928
-
C:\PROGRA~3\Mozilla\acwxofj.exeC:\PROGRA~3\Mozilla\acwxofj.exe -stamzkg1⤵
- Executes dropped EXE
PID:3804
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
148KB
MD5da20ea2c839b092f75dfddfc4819d184
SHA108f142dae83fafc5098a6d72e6f36eb298258828
SHA2569a05ca6206539513765c04a290c38f421971647881f1b05ef5b21ae5a8ba4eab
SHA512d21eedaf8ef1a17f41d4503e474db1ca9fd8b7e3ee4fdab561a9674ef689e3c288323280699fa39a263e3c891f1ae6a99f1a6f2638846ac023ef7c94c023ddec
-
Filesize
148KB
MD5da20ea2c839b092f75dfddfc4819d184
SHA108f142dae83fafc5098a6d72e6f36eb298258828
SHA2569a05ca6206539513765c04a290c38f421971647881f1b05ef5b21ae5a8ba4eab
SHA512d21eedaf8ef1a17f41d4503e474db1ca9fd8b7e3ee4fdab561a9674ef689e3c288323280699fa39a263e3c891f1ae6a99f1a6f2638846ac023ef7c94c023ddec