Analysis
-
max time kernel
141s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
03/11/2023, 09:09
General
-
Target
NEAS.b92029c2f3218a7075fcb8bbec8cc600.exe
-
Size
39KB
-
MD5
b92029c2f3218a7075fcb8bbec8cc600
-
SHA1
b00f80618166ae8f4cc7771248eebae21bdae516
-
SHA256
d42a0ee076185153555a079950e7766e497f27818557ee99ffdf1a6fbc3121db
-
SHA512
b315a03b333b8b0f5762689b22d3d8f7760dd3ec12a5f285f8a5228532a04d6a954b65d4b54fdc5ac6e40284dcdb294a381592950139dde5a8ee14b861f568e4
-
SSDEEP
768:DDiEQ9DOsz82VPP3lLuzZPKqDijCBrBEEp4m:QDN82VPP3lLuBZDL/p4m
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.b92029c2f3218a7075fcb8bbec8cc600.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.b92029c2f3218a7075fcb8bbec8cc600.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD52ef7f9be031f86854a0e5465c175ebeb
SHA1faff04f07134958450ab4f576c89cb9b9b5b5f1b
SHA2566c799e0f6fc2e99c9af0ad1eb3299008910ae35a14d0cf8b1840bdd5d52087f4
SHA5120710a1162c7843c2e6e822401ef3b0dca47e4d03ab0bca35f163b153ed2f22939f51477d05ea2b3d4586c90841f49ec06204f032bcdd6dedaa3dfbf72170ca7c
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
68KB