63fc4c1c5fea978353d995a7b57f5e177a6a92090361e9cf79e9ae28eefca1ec

Analysis

max time kernel
120s
max time network
144s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
04/11/2023, 10:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

NEAS.2f64ca98234202cfecbe450207778700_JC.exe
Size

301KB
MD5

2f64ca98234202cfecbe450207778700
SHA1

6740571776a33720461fe90131773e2b3194db1b
SHA256

63fc4c1c5fea978353d995a7b57f5e177a6a92090361e9cf79e9ae28eefca1ec
SHA512

8a46732c97706b8c59e44cf1df22beac0a1183ea242aa9c4d875ae3766eb615124beb2e1e9e37c6b74a021ff4fc6729b78abdb6ea2a51185c7f2e82f6f812800
SSDEEP

6144:arV/9uEo2S1YnQmCX492DkwNP3qpYFr7VhXbRUtDqGX6polbLG:arV1u6/eIo4g7VIRX6po5LG

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
2296	NEAS.2f64ca98234202cfecbe450207778700_JC.exe
2296	NEAS.2f64ca98234202cfecbe450207778700_JC.exe
2296	NEAS.2f64ca98234202cfecbe450207778700_JC.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2296	NEAS.2f64ca98234202cfecbe450207778700_JC.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.2f64ca98234202cfecbe450207778700_JC.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.2f64ca98234202cfecbe450207778700_JC.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
PID:2296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\InstallMate\19D3C7DD\cfg\1.ini

Filesize
40KB

MD5
f2b28b165747468c88ef4e1df60a6601

SHA1
0515cb22048f232872251630c28b97bcb4f18dda

SHA256
be70bd6ea6c6c0779570a02324dc1fb8847a6202faf35efb9a189ef2f19138c4

SHA512
9b0abea9158437a8c5ff422b5debeaf7600611efc4b845dffb3098884d3a090ecf3449b66b4051a9e1319141096a5542f0b6ba9454960561bff85be0a3f303ed

Download Submit
\Users\Admin\AppData\Local\Temp\TsuA7BD6C90.dll

Filesize
269KB

MD5
af7ce801c8471c5cd19b366333c153c4

SHA1
4267749d020a362edbd25434ad65f98b073581f1

SHA256
cf7e00ba429bc9f27ccfacc49ae367054f40ada6cede9f513cc29a24e88bf49e

SHA512
88655bd940e9b540c4df551fe68135793eceed03f94389b0654637a18b252bf4d3ef73b0c49548b5fa6ba2cf6d9aff79335c4ebcc0b668e008bcc62c40d2a73c

Download Submit
\Users\Admin\AppData\Local\Temp\{984583FF-B33E-48EE-AA05-FB1C43A6A109}\Custom.dll

Filesize
63KB

MD5
3fa769ed1d2b9091f3efbc57fb68f549

SHA1
789f143223f269d7e890f454601af87b21ef6426

SHA256
70530c068b47268d47d0712b6f77d2d90665d548ff691f7994691c69dda54f48

SHA512
2725a892a2d12b7cc7327d5263831efbb21909a7ec1e775fb3c26c73e77475f295e7156469bf336d695926cfb48c8520aff1c6efddfb6cb3cdf2a80f4bd314e5

Download Submit
\Users\Admin\AppData\Local\Temp\{984583FF-B33E-48EE-AA05-FB1C43A6A109}\_Setup.dll

Filesize
160KB

MD5
59402a7e186716680025f44c0901e227

SHA1
1abfe8ebcba6b6b655a4aa0196039c670bdaeb3a

SHA256
f1d3cb9fdd48adaaf8019669ed9f32538507af669e1510d9d9af7bb74efa3135

SHA512
a420d69f25ee95a342a213ef6b89f53f2207e0c25f60fe0b566327008f81e89caed6ed0e948834c90739ca2f72f926411afb7097b559e9e8ab4c3f2499522bb3

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads