Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
02-11-2023 10:05
General
-
Target
NEAS.d86c23eb7e65f7adbc575c328108ab70_JC.exe
-
Size
5.4MB
-
MD5
d86c23eb7e65f7adbc575c328108ab70
-
SHA1
727267733561252503bfe7a8bf847b7d7a43f548
-
SHA256
6ae7cd245ebaebe65213353010e485419d69ec7b4a5f04b52957576e6001e920
-
SHA512
a4f1a6a92052b2dad016ec7639557336515ba402832505f94c3f211079ca3dc045ab82cdc7dedcf434bc3e3aad2ddce8ad3682572d7685f1c5061c52940498c3
-
SSDEEP
98304:htLK3TDhtvS0Hpe4zbpaAKQkroGIK23ft:4TnvjeApaAvkt
Malware Config
Signatures
-
Executes dropped EXE 2 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.d86c23eb7e65f7adbc575c328108ab70_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.d86c23eb7e65f7adbc575c328108ab70_JC.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
644KB
MD54bef9aa768db93c359be16de3e61cd77
SHA18d37cf3d7da884b8a9411b04bbd34de91200fbfe
SHA2568971240f4558529558b3cc9bf8b85c1bacffeec453ec98f728cf13d67ae38d4b
SHA512dbf93b5116c3fdfca42a9d3f9868a5e50426fdd399fe5cc809efe46412158ffedba42696e75281f9a141929018d782a521f8b22fbcb33087567c21bc593fd4ef
-
Filesize
644KB
MD54bef9aa768db93c359be16de3e61cd77
SHA18d37cf3d7da884b8a9411b04bbd34de91200fbfe
SHA2568971240f4558529558b3cc9bf8b85c1bacffeec453ec98f728cf13d67ae38d4b
SHA512dbf93b5116c3fdfca42a9d3f9868a5e50426fdd399fe5cc809efe46412158ffedba42696e75281f9a141929018d782a521f8b22fbcb33087567c21bc593fd4ef
-
Filesize
656KB
-
Filesize
656KB
-
Filesize
384KB
-
Filesize
5.5MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
5.5MB
-
Filesize
384KB
-
Filesize
5.5MB