Analysis
-
max time kernel
150s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
04-11-2023 07:54
Behavioral task
behavioral1
Sample
NEAS.002455400419bb87fb890a580bef19b0.exe
Resource
win7-20231023-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.002455400419bb87fb890a580bef19b0.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
NEAS.002455400419bb87fb890a580bef19b0.exe
-
Size
1.1MB
-
MD5
002455400419bb87fb890a580bef19b0
-
SHA1
49d3edcfc96b86805147644967772523c1eb3ee0
-
SHA256
5502d4d71e836e75dc289cd57e779d1daa705f3db8efec5cb5ac2cbaeff04f19
-
SHA512
90391ad107177032014e3a21d6ef8153ff321271bd047c97d495d428ec37bfc72bb8ebc0066f0fbac9759f13eaca5bb2327920e1e749cf61806fff1fc37cb943
-
SSDEEP
24576:BXFCq4QbihXxWnimvhh7WmQpYWMrSGZ5D1+xn0:B1ixzsuju+xn
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2096-0-0x0000000000400000-0x0000000000511000-memory.dmp upx behavioral1/memory/2096-2-0x0000000000400000-0x0000000000511000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe 2096 NEAS.002455400419bb87fb890a580bef19b0.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2096 NEAS.002455400419bb87fb890a580bef19b0.exe