ae649519b6cec096ac7292401d12d7b9fe6e7cfd5df246537c5997de27e04530

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
02-11-2023 08:27

Target

NEAS.e8d7e89535e6370cbcdb18fe2f988fd0.exe
Size

126KB
MD5

e8d7e89535e6370cbcdb18fe2f988fd0
SHA1

39ca9883a0da827ac5e5fc2af155f4b088a88532
SHA256

ae649519b6cec096ac7292401d12d7b9fe6e7cfd5df246537c5997de27e04530
SHA512

1ea45ddbe5eb11bd0790e0d852d4444a845975458a5fcf9fd86bc598505f98f3e7cf817fd4a80cee0498d4cef3d30508516ed7243915eabb2a215c16e3831824
SSDEEP

1536:YcbqyEk65QiMa2Zi2tSVG4FnjJdLl19/Gb6XBMC4HteMLBd4:7LSQilNIHujLl19/Gb6XBMBeMLBd4

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x0008000000014b59-4.dat	upx
behavioral1/memory/288-7-0x0000000000400000-0x000000000041C000-memory.dmp	upx
behavioral1/memory/288-102-0x0000000000400000-0x000000000041C000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	NEAS.e8d7e89535e6370cbcdb18fe2f988fd0.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.e8d7e89535e6370cbcdb18fe2f988fd0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.e8d7e89535e6370cbcdb18fe2f988fd0.exe"
1⤵
- Drops file in Windows directory
PID:288

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Filesize
126KB

MD5
e8d7e89535e6370cbcdb18fe2f988fd0

SHA1
39ca9883a0da827ac5e5fc2af155f4b088a88532

SHA256
ae649519b6cec096ac7292401d12d7b9fe6e7cfd5df246537c5997de27e04530

SHA512
1ea45ddbe5eb11bd0790e0d852d4444a845975458a5fcf9fd86bc598505f98f3e7cf817fd4a80cee0498d4cef3d30508516ed7243915eabb2a215c16e3831824

Download Submit
memory/288-7-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download
memory/288-102-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download