Analysis
-
max time kernel
140s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
03/11/2023, 04:37
General
-
Target
NEAS.002c29cf644f775765bbd65345409520_JC.exe
-
Size
1.5MB
-
MD5
002c29cf644f775765bbd65345409520
-
SHA1
5ab7f349239fbb1ac5757084d46c9667b8c88eb4
-
SHA256
a92da8bd4e8ed340fab269117b4e8fa34adeef4fba5efb1dfff41b1124af4420
-
SHA512
44a83e65485bc31eccd8c9791608b817a27b927f0fee836e9ce81ca2e9dc62d2905b966e5dbcb8dd2f69850a2aee47d4cc3aa754dcf85109187b74c3aeeda203
-
SSDEEP
24576:UXaRicFDnikUa0BVdybnnavdZhVESwGMx0/J2Gn20YU/3eRwGsU3:86ikU0bnaThVESGIJ2h0Y0OR5
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.002c29cf644f775765bbd65345409520_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.002c29cf644f775765bbd65345409520_JC.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4580 -s 21162⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4580 -ip 45801⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
-
Filesize
8KB
-
Filesize
1.6MB
-
Filesize
8KB
-
Filesize
1.6MB
-
Filesize
1.6MB