Analysis

  • max time kernel
    150s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/11/2023, 16:33

General

  • Target

    NEAS.03ff9017f8a2db83205ada1dc9a3ea20.exe

  • Size

    178KB

  • MD5

    03ff9017f8a2db83205ada1dc9a3ea20

  • SHA1

    e05a4f1c645d120ff68d830a7461d9b8a5a30504

  • SHA256

    4d14a974bde0cada3ffa8c43ec0fb8cb88eae1e0aeaffa8694467e638f43dce7

  • SHA512

    fb0acfc1cab4dc97092a0feffcf6d50925ae8d44daf9309351110ea885fd2021a4a7152ac00f012a547d034e17565231f1514832099f24a1af2f3355de0bc680

  • SSDEEP

    3072:MFmxsczyRrAO75U+31DjsAZ8yTyZMCAeABYDgcvZd6l1zPDpcDKJJ3RnQFz:MQ2RrAO7zBjsAjTyZMCAeABYlGz6KJ36

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.03ff9017f8a2db83205ada1dc9a3ea20.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.03ff9017f8a2db83205ada1dc9a3ea20.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:3160

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3160-0-0x0000000000400000-0x00000000004BF000-memory.dmp

    Filesize

    764KB

  • memory/3160-1-0x0000000000400000-0x00000000004BF000-memory.dmp

    Filesize

    764KB

  • memory/3160-2-0x0000000000400000-0x00000000004BF000-memory.dmp

    Filesize

    764KB

  • memory/3160-3-0x0000000000400000-0x00000000004BF000-memory.dmp

    Filesize

    764KB

  • memory/3160-4-0x0000000000400000-0x00000000004BF000-memory.dmp

    Filesize

    764KB

  • memory/3160-5-0x0000000000400000-0x00000000004BF000-memory.dmp

    Filesize

    764KB

  • memory/3160-6-0x0000000000400000-0x00000000004BF000-memory.dmp

    Filesize

    764KB

  • memory/3160-7-0x0000000000400000-0x00000000004BF000-memory.dmp

    Filesize

    764KB

  • memory/3160-8-0x0000000000400000-0x00000000004BF000-memory.dmp

    Filesize

    764KB

  • memory/3160-9-0x0000000000400000-0x00000000004BF000-memory.dmp

    Filesize

    764KB

  • memory/3160-10-0x0000000000400000-0x00000000004BF000-memory.dmp

    Filesize

    764KB

  • memory/3160-11-0x0000000000400000-0x00000000004BF000-memory.dmp

    Filesize

    764KB

  • memory/3160-12-0x0000000000400000-0x00000000004BF000-memory.dmp

    Filesize

    764KB

  • memory/3160-13-0x0000000000400000-0x00000000004BF000-memory.dmp

    Filesize

    764KB

  • memory/3160-14-0x0000000000400000-0x00000000004BF000-memory.dmp

    Filesize

    764KB

  • memory/3160-15-0x0000000000400000-0x00000000004BF000-memory.dmp

    Filesize

    764KB