b7fefa530070207f1a1c3f7bd694fc3bbf9e5b20b58f81bc2cf4e7ce639a9f83

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
01-11-2023 13:54

Target

NEAS.1f7cdfedf4ce2e6099bcd594c3be93d0.exe
Size

172KB
MD5

1f7cdfedf4ce2e6099bcd594c3be93d0
SHA1

e1219f51ffc21e5684913e901dc4c1e6bd3e3452
SHA256

b7fefa530070207f1a1c3f7bd694fc3bbf9e5b20b58f81bc2cf4e7ce639a9f83
SHA512

0ebd65aa79fd2749fd78d550ea2e5c527902e5d077218a752f385ab84c7ac094761bd474a6bf513a58ef691e6e1af48c9ef5a39ece747cbdd908dd20dade50be
SSDEEP

3072:nxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tA3Zpkz1zukmH:x2pdqfv2IPOGfXf5ovWJk1abH

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2096-0-0x0000000000400000-0x0000000000429000-memory.dmp	upx
behavioral1/files/0x0007000000014abe-5.dat	upx
behavioral1/memory/2096-102-0x0000000000400000-0x0000000000429000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	NEAS.1f7cdfedf4ce2e6099bcd594c3be93d0.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.1f7cdfedf4ce2e6099bcd594c3be93d0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.1f7cdfedf4ce2e6099bcd594c3be93d0.exe"
1⤵
- Drops file in Windows directory
PID:2096

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Filesize
172KB

MD5
8db8a977018b9037606abb05629cf4b1

SHA1
2f36a72c10efd43f0f8da60fb9a551cc4672335f

SHA256
9f0162bc7b635e8bce7b152b5a1907e498e13175054e8dc8d0dc1d6999097638

SHA512
fb91f12b0f3151c71c6e6a6f5a6aa041c10439aa2a91011dd0dda24b82b1fc9681938f57e4fd3058ab62db7c46c6e22376c0190967597fa2ba10b8f79b5e7bfe

Download Submit
memory/2096-0-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download
memory/2096-102-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download