Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    28/10/2023, 19:55

General

  • Target

    NEAS.6414ed162055cb8e2ad7930ee1a89b60.dll

  • Size

    585KB

  • MD5

    6414ed162055cb8e2ad7930ee1a89b60

  • SHA1

    094ada97e3eaa58090b62715833b7626474eceae

  • SHA256

    7d43e79a7f2f4ba1d4dafa499c0413b0a12b16f8c18015c1b85fb0bd44e22fbd

  • SHA512

    aa93ee094fa2c3e9d55811b2d4978835d2bff584916c8e0c784b5a1ca317fb9f8b94a2199f389cc38064066e529d9664359df66ab8afb8d118008841ef7207e3

  • SSDEEP

    6144:j88UYYb/KpBEz6sRqE+TNhmUT03Q4kfryqF6mLUoGS:gYYb/KpBY6VNh703ix8mTGS

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\NEAS.6414ed162055cb8e2ad7930ee1a89b60.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2472
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\NEAS.6414ed162055cb8e2ad7930ee1a89b60.dll,#1
      2⤵
        PID:2256

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads