Analysis

  • max time kernel
    120s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    01-11-2023 14:18

General

  • Target

    NEAS.be85c459367dcf8820f6e157003f9440.exe

  • Size

    600KB

  • MD5

    be85c459367dcf8820f6e157003f9440

  • SHA1

    542c7b6c0af483b61395044f31b922ec8a2dfdf8

  • SHA256

    08a41e52deaddd2b456b45c90db95a7ca6e619ae9ed696336729bafd24b71638

  • SHA512

    d7b997c4765bf7694c772aa72825217836473e7d3d4db434bedbd6c4f445c65df5b1f974c8fe0fae864adca89f0eb3e26c97a6fe891e71e6532c02aff3bb8f54

  • SSDEEP

    12288:zJB0lh7r6bIjk0aCyxI8Yhm46LchjBhIVHSJaFCu:zQ7W8QaTrjAVHhCu

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.be85c459367dcf8820f6e157003f9440.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.be85c459367dcf8820f6e157003f9440.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2812-2-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2812-3-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2812-5-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2812-4-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2812-6-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2812-7-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2812-9-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2812-8-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2812-12-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2812-11-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2812-13-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2812-10-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/2812-14-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB