b07d29ab157869579f705af16fe0cc4f59aef6eca1fd99eeb2eee2532ca4a0be

Analysis

max time kernel
141s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
22-10-2023 17:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

NEAS.669f2618518ce638f4c2abee3b04a0c0.exe
Size

73KB
MD5

669f2618518ce638f4c2abee3b04a0c0
SHA1

4a385e7e0514bc0856386679d8173665e28e63a7
SHA256

b07d29ab157869579f705af16fe0cc4f59aef6eca1fd99eeb2eee2532ca4a0be
SHA512

53e4e74f324ddb9d0344ae82ca0e6eb2e257f02de3e660ac2300bbe79b193d35e868fd1167c7c7040689f7d4e354991d9c85d32adec038ba63d7ef7f16b3ee92
SSDEEP

1536:X555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:4MSjOnrmBxMqqDL2/mr3IdE8we0Avu5h

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 3 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	NEAS.669f2618518ce638f4c2abee3b04a0c0.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	NEAS.669f2618518ce638f4c2abee3b04a0c0.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier	NEAS.669f2618518ce638f4c2abee3b04a0c0.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2828	NEAS.669f2618518ce638f4c2abee3b04a0c0.exe
2828	NEAS.669f2618518ce638f4c2abee3b04a0c0.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.669f2618518ce638f4c2abee3b04a0c0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.669f2618518ce638f4c2abee3b04a0c0.exe"
1⤵
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
PID:2828

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads