Analysis

  • max time kernel
    131s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    02-11-2023 16:40

General

  • Target

    NEAS.175970c36ccaefb44d676c432fc55260.exe

  • Size

    1.5MB

  • MD5

    175970c36ccaefb44d676c432fc55260

  • SHA1

    ae35eed156f1c72c22fed0693fa5ab8e9b22a6b2

  • SHA256

    3b402aaeea52400f4f3dcb3c5784931f6e035c7deb83c5c14ef91240c7a9890a

  • SHA512

    1b29a241c023674e668553901c4c41fe003edf5c09aa3b2affc2a178da2aaec0f9f3b66b0a27a4192d9aa9456570b73e3a57f0758cbee9f305eec88ec918fe72

  • SSDEEP

    24576:zQ5aILMCfmARvKYYtJh1AarT1sMFasxB58K6V1lMSIYtY9UWpgj/M3BAV+cC2:E5aIwC+A8Jh1Aa1dFbWv2Kx

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.175970c36ccaefb44d676c432fc55260.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.175970c36ccaefb44d676c432fc55260.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2984-2-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/2984-3-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/2984-4-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/2984-5-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/2984-6-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/2984-7-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/2984-9-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/2984-8-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/2984-11-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/2984-10-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/2984-12-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/2984-14-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB

  • memory/2984-13-0x00000000001F0000-0x00000000001F1000-memory.dmp

    Filesize

    4KB