Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
-
submitted
01-11-2023 04:55
General
-
Target
NEAS.14f1245ac917fafe1bfbb48818ef2ba0.exe
-
Size
145KB
-
MD5
14f1245ac917fafe1bfbb48818ef2ba0
-
SHA1
ab6455521722a94a2198137865c2428f59fcb781
-
SHA256
d6500c5d5b08e63fd7995defc3afd63a2e657f369cfe7afb629b122d288e3e2b
-
SHA512
802b804247018222e420723d770066d21849816952100b70961c5f1c5a1896fd0f2bf812d1939ca6111feca8987e065d7bacc5ac5ad4c0fdea09378ca9f34a35
-
SSDEEP
3072:lafKzl+8KztbcDjYz3PyT4k6Bfnq8hK390efoMVpdSYA0E7omXzQIK6O:mMzKztEjYjfxB/LK3NfVEY7ENTK
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\NEAS.14f1245ac917fafe1bfbb48818ef2ba0.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.14f1245ac917fafe1bfbb48818ef2ba0.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
140KB
-
Filesize
116KB
-
Filesize
116KB