Analysis
-
max time kernel
8s -
max time network
12s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
02-11-2023 01:00
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.21093638102b2bc9c56e6af2d530aba0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.21093638102b2bc9c56e6af2d530aba0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.21093638102b2bc9c56e6af2d530aba0_JC.exe
-
Size
98KB
-
MD5
21093638102b2bc9c56e6af2d530aba0
-
SHA1
43847a428bb91644194a13f35bae3ccf33822f1e
-
SHA256
4a40e3fc9e14ec1d3088b933bb7ac1df25200c0a8255710d20e2a9a397e0efca
-
SHA512
e9f3c1341f5bfa9047f3eb4ea18d337492f2a67afe1bc486413662b7fd5d87a1c3840524b8863db0194229e885d18e9b97dd39d26e5f8ed94ecf1c1f5ba5c139
-
SSDEEP
3072:u2bPVlKnQMeEP+8vIjBWpi4rELdC/T5bu:uiKLt+8viBWpTALcu
Malware Config
Signatures
-
Drops file in Program Files directory 1 IoCs
description ioc Process File created C:\PROGRA~3\Mozilla\yqzqgud.exe NEAS.21093638102b2bc9c56e6af2d530aba0_JC.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.21093638102b2bc9c56e6af2d530aba0_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.21093638102b2bc9c56e6af2d530aba0_JC.exe"1⤵
- Drops file in Program Files directory
PID:3560
-
C:\PROGRA~3\Mozilla\yqzqgud.exeC:\PROGRA~3\Mozilla\yqzqgud.exe -ikphvdj1⤵PID:1184
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
98KB
MD5fde89146c608e3913b25c099b8959435
SHA12c1701da68990527bc9f0286cd9e097c8cd57d6b
SHA2565f311611eb0e6bc7a77b52f2b73ce40d0cae16364171624c60123f48790f3e8b
SHA5124894b41fd9bcc36f3bde2921650560ee2b4547adbb8eae0313fc2ec6444a06a7bf3dee83a85f437ccb001d11f6770f3fbda1ca2c86dc8a1e655541d94b026864
-
Filesize
98KB
MD5fde89146c608e3913b25c099b8959435
SHA12c1701da68990527bc9f0286cd9e097c8cd57d6b
SHA2565f311611eb0e6bc7a77b52f2b73ce40d0cae16364171624c60123f48790f3e8b
SHA5124894b41fd9bcc36f3bde2921650560ee2b4547adbb8eae0313fc2ec6444a06a7bf3dee83a85f437ccb001d11f6770f3fbda1ca2c86dc8a1e655541d94b026864