Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    03/11/2023, 11:14

General

  • Target

    NEAS.dc2993eec8154bdf3920df5522e88c00.exe

  • Size

    3.8MB

  • MD5

    dc2993eec8154bdf3920df5522e88c00

  • SHA1

    6f265f0179c1a74aef8c12c5724c05a857845f31

  • SHA256

    65362c324255a11ae8b45f8e697632484c2f7932e6b67abdb97843631757b888

  • SHA512

    0bf507e371ae0ada41f95e4dfed1dbf22caff5b099e7a9791cd4e9253778c6f1bde47ac1c4859da1943f0234000ef8933f23653b843b7ec246dccd9f0d4f62a8

  • SSDEEP

    98304:70OUZpn+8vcAAWej3bcZix7Shmd7+sJBgjfvvoWro6G:7fUrcdc8x0md+1fXHlG

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.dc2993eec8154bdf3920df5522e88c00.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.dc2993eec8154bdf3920df5522e88c00.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1788

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1788-0-0x0000000004B80000-0x0000000004C97000-memory.dmp

    Filesize

    1.1MB

  • memory/1788-1-0x0000000074C90000-0x000000007537E000-memory.dmp

    Filesize

    6.9MB

  • memory/1788-2-0x0000000004B80000-0x0000000004C97000-memory.dmp

    Filesize

    1.1MB

  • memory/1788-4-0x0000000004B80000-0x0000000004C97000-memory.dmp

    Filesize

    1.1MB

  • memory/1788-6-0x00000000003E0000-0x00000000003E1000-memory.dmp

    Filesize

    4KB

  • memory/1788-14-0x0000000010000000-0x0000000010005000-memory.dmp

    Filesize

    20KB

  • memory/1788-16-0x0000000006FE0000-0x0000000006FE1000-memory.dmp

    Filesize

    4KB

  • memory/1788-18-0x0000000010000000-0x0000000010005000-memory.dmp

    Filesize

    20KB

  • memory/1788-17-0x0000000002150000-0x0000000002151000-memory.dmp

    Filesize

    4KB

  • memory/1788-19-0x0000000002790000-0x0000000002791000-memory.dmp

    Filesize

    4KB

  • memory/1788-21-0x0000000006F50000-0x0000000006F51000-memory.dmp

    Filesize

    4KB

  • memory/1788-24-0x0000000010000000-0x0000000010005000-memory.dmp

    Filesize

    20KB

  • memory/1788-23-0x0000000006F60000-0x0000000006F61000-memory.dmp

    Filesize

    4KB

  • memory/1788-32-0x0000000010000000-0x0000000010005000-memory.dmp

    Filesize

    20KB

  • memory/1788-29-0x0000000010000000-0x0000000010005000-memory.dmp

    Filesize

    20KB

  • memory/1788-27-0x0000000000890000-0x0000000000891000-memory.dmp

    Filesize

    4KB

  • memory/1788-26-0x0000000006FB0000-0x0000000006FB1000-memory.dmp

    Filesize

    4KB

  • memory/1788-37-0x0000000006F30000-0x0000000006F31000-memory.dmp

    Filesize

    4KB

  • memory/1788-36-0x0000000006F40000-0x0000000006F41000-memory.dmp

    Filesize

    4KB

  • memory/1788-38-0x0000000006F10000-0x0000000006F11000-memory.dmp

    Filesize

    4KB

  • memory/1788-39-0x0000000004B30000-0x0000000004B31000-memory.dmp

    Filesize

    4KB

  • memory/1788-40-0x0000000077EA0000-0x0000000077EA1000-memory.dmp

    Filesize

    4KB

  • memory/1788-42-0x0000000006FC0000-0x0000000006FC1000-memory.dmp

    Filesize

    4KB

  • memory/1788-41-0x0000000004B40000-0x0000000004B80000-memory.dmp

    Filesize

    256KB

  • memory/1788-44-0x0000000007BF0000-0x0000000007C72000-memory.dmp

    Filesize

    520KB

  • memory/1788-43-0x0000000006F20000-0x0000000006F21000-memory.dmp

    Filesize

    4KB

  • memory/1788-46-0x00000000022F0000-0x00000000022F1000-memory.dmp

    Filesize

    4KB

  • memory/1788-48-0x0000000007BF0000-0x0000000007C72000-memory.dmp

    Filesize

    520KB

  • memory/1788-47-0x00000000027B0000-0x00000000027B1000-memory.dmp

    Filesize

    4KB

  • memory/1788-49-0x0000000004AC0000-0x0000000004AC1000-memory.dmp

    Filesize

    4KB

  • memory/1788-54-0x00000000022E0000-0x00000000022E1000-memory.dmp

    Filesize

    4KB

  • memory/1788-53-0x0000000074C90000-0x000000007537E000-memory.dmp

    Filesize

    6.9MB

  • memory/1788-57-0x0000000007BF0000-0x0000000007C72000-memory.dmp

    Filesize

    520KB

  • memory/1788-64-0x0000000006F70000-0x0000000006F71000-memory.dmp

    Filesize

    4KB

  • memory/1788-65-0x0000000006F80000-0x0000000006F81000-memory.dmp

    Filesize

    4KB

  • memory/1788-68-0x0000000008190000-0x000000000819A000-memory.dmp

    Filesize

    40KB

  • memory/1788-66-0x0000000008190000-0x000000000819A000-memory.dmp

    Filesize

    40KB

  • memory/1788-71-0x0000000008190000-0x000000000819A000-memory.dmp

    Filesize

    40KB

  • memory/1788-74-0x0000000008190000-0x000000000819A000-memory.dmp

    Filesize

    40KB

  • memory/1788-81-0x00000000749F0000-0x0000000074A70000-memory.dmp

    Filesize

    512KB

  • memory/1788-87-0x00000000081A0000-0x00000000081AA000-memory.dmp

    Filesize

    40KB

  • memory/1788-86-0x00000000081A0000-0x00000000081AA000-memory.dmp

    Filesize

    40KB

  • memory/1788-85-0x00000000081A0000-0x00000000081AA000-memory.dmp

    Filesize

    40KB

  • memory/1788-84-0x00000000081A0000-0x00000000081AA000-memory.dmp

    Filesize

    40KB

  • memory/1788-83-0x00000000081A0000-0x00000000081AA000-memory.dmp

    Filesize

    40KB

  • memory/1788-88-0x0000000004B80000-0x0000000004C97000-memory.dmp

    Filesize

    1.1MB

  • memory/1788-91-0x0000000004B40000-0x0000000004B80000-memory.dmp

    Filesize

    256KB

  • memory/1788-107-0x0000000008AC0000-0x0000000008ADC000-memory.dmp

    Filesize

    112KB

  • memory/1788-108-0x0000000004B40000-0x0000000004B80000-memory.dmp

    Filesize

    256KB

  • memory/1788-109-0x0000000004B40000-0x0000000004B80000-memory.dmp

    Filesize

    256KB

  • memory/1788-120-0x0000000004B40000-0x0000000004B80000-memory.dmp

    Filesize

    256KB

  • memory/1788-121-0x0000000006F00000-0x0000000006F01000-memory.dmp

    Filesize

    4KB

  • memory/1788-133-0x0000000074C90000-0x000000007537E000-memory.dmp

    Filesize

    6.9MB