1a8c1ec3dcc7cf3edee454027254127e779c58184455e151b64a59dfa9d1675d

Analysis

max time kernel
142s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
01/11/2023, 13:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

NEAS.0888677c9adbcece2644e1286612e640_JC.exe
Size

112KB
MD5

0888677c9adbcece2644e1286612e640
SHA1

758cdc1afa4d75062d003a84483f9f45ebe7c0d8
SHA256

1a8c1ec3dcc7cf3edee454027254127e779c58184455e151b64a59dfa9d1675d
SHA512

132aade2c076cd487babd7fab7b064e4ca97a705ab948f628b9b504f5b849370e668faca03dc9cbb3173ad1fe5d2fed924afcd3cff100eb6d3e3b754e96c9cc2
SSDEEP

3072:1ZduCcp8iJUAAkRsQ4IVgCxvQ4VIaxo127smTwnsq:1qp0nkeQ4mxvQ4VI7o4sq

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/736-0-0x0000000000400000-0x0000000000417000-memory.dmp	upx
behavioral2/files/0x0006000000022e18-5.dat	upx
behavioral2/memory/736-18-0x0000000000400000-0x0000000000417000-memory.dmp	upx

Drops file in Windows directory 19 IoCs

description	ioc	Process
File created	C:\Windows\win32dc\Half-Life 2(hack).exe	NEAS.0888677c9adbcece2644e1286612e640_JC.exe
File opened for modification	C:\Windows\win32dc\Sims 2_trainer.exe	NEAS.0888677c9adbcece2644e1286612e640_JC.exe
File created	C:\Windows\win32dc\Half-Life 2(crack).exe	NEAS.0888677c9adbcece2644e1286612e640_JC.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2(crack).exe	NEAS.0888677c9adbcece2644e1286612e640_JC.exe
File opened for modification	C:\Windows\win32dc\Sims 2 + codes.exe	NEAS.0888677c9adbcece2644e1286612e640_JC.exe
File opened for modification	C:\Windows\sBNRFHex.com	NEAS.0888677c9adbcece2644e1286612e640_JC.exe
File opened for modification	C:\Windows\win32dc\DAoC(codes).exe	NEAS.0888677c9adbcece2644e1286612e640_JC.exe
File created	C:\Windows\win32dc\BattleField 1942(hack).exe	NEAS.0888677c9adbcece2644e1286612e640_JC.exe
File opened for modification	C:\Windows\win32dc\BattleField 1942(hack).exe	NEAS.0888677c9adbcece2644e1286612e640_JC.exe
File created	C:\Windows\win32dc\Sims 2 cdfix.exe	NEAS.0888677c9adbcece2644e1286612e640_JC.exe
File opened for modification	C:\Windows\win32dc\Sims 2 cdfix.exe	NEAS.0888677c9adbcece2644e1286612e640_JC.exe
File created	C:\Windows\win32dc\Doom 3_patch.exe	NEAS.0888677c9adbcece2644e1286612e640_JC.exe
File opened for modification	C:\Windows\win32dc\Half-Life 2(hack).exe	NEAS.0888677c9adbcece2644e1286612e640_JC.exe
File created	C:\Windows\win32dc\Sims 2_trainer.exe	NEAS.0888677c9adbcece2644e1286612e640_JC.exe
File created	C:\Windows\win32dc\UT2004(cheat).exe	NEAS.0888677c9adbcece2644e1286612e640_JC.exe
File created	C:\Windows\win32dc\Sims 2 + codes.exe	NEAS.0888677c9adbcece2644e1286612e640_JC.exe
File created	C:\Windows\win32dc\Doom 3(codes).exe	NEAS.0888677c9adbcece2644e1286612e640_JC.exe
File opened for modification	C:\Windows\win32dc\Doom 3_patch.exe	NEAS.0888677c9adbcece2644e1286612e640_JC.exe
File created	C:\Windows\win32dc\DAoC(codes).exe	NEAS.0888677c9adbcece2644e1286612e640_JC.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.0888677c9adbcece2644e1286612e640_JC.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.0888677c9adbcece2644e1286612e640_JC.exe"
1⤵
- Drops file in Windows directory
PID:736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\win32dc\BattleField 1942(hack).exe

Filesize
114KB

MD5
e24d496c6126dc25b962ce9339a23643

SHA1
7343881d1a10dda54d82c605d0ccd918e9f1b221

SHA256
688fbe1818571e46c368b9910d2d2b9ae337d7681d9081d048f124412a424158

SHA512
77fa0d02ed474f747435301238a6700a269a8a31f4b8c41a082d0d42b8c1d689af2b54ca253b0bb25664a7c148ea60118355bc3783655c37677b528c76a83f3b

Download Submit
memory/736-0-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download
memory/736-18-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads