Analysis

  • max time kernel
    138s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/11/2023, 14:15

General

  • Target

    NEAS.03c90635ed2ca8bb94884d51b22af500.exe

  • Size

    308KB

  • MD5

    03c90635ed2ca8bb94884d51b22af500

  • SHA1

    2848ddfafb25c72702c1dff90d4b3fba772d09b2

  • SHA256

    bc21a6b89cec65fbcc3268c60bab3c4e2b96c4a0c0e94aefe461938212c3ffcf

  • SHA512

    05a96d9461e2724a083466e68eacaa6f263059539d3a21d2db29df037c074bf99d8298a5bc578c1c3ae6c64bbc2482e60266a58434e5d50417ed5eaac81093cd

  • SSDEEP

    6144:ar+vI5RxWBDg7V0eXze6OvA487Xw3pxYVEkNtAfn014TKChtZWg:ar+vI3sBDJejgPT3QuA6ug

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.03c90635ed2ca8bb94884d51b22af500.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.03c90635ed2ca8bb94884d51b22af500.exe"
    1⤵
    • Loads dropped DLL
    PID:2156

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Tsu9BF69BAD.dll

    Filesize

    269KB

    MD5

    73f84010494b1b9e4b478790bbd3d71a

    SHA1

    136f73ff2ccb0ca4a558f7b72f8d9641bf7ee7f0

    SHA256

    41a58310d5c51c6dea425a4dd7e79c7dea67be75915512990ac263ff8f6e02a0

    SHA512

    e57eddfb249597151e09c4aebd9d2d77239ce677cd47d944202ed2a2a68af042c7b0a9725c366414300647d11c3bdafe3f163c065b8b6c89efa56fc764ac2966

  • C:\Users\Admin\AppData\Local\Temp\{42CE5207-16AF-4802-AAE9-5E8D992D70F1}\Custom.dll

    Filesize

    58KB

    MD5

    276b13bcd2960593625e190e9860d501

    SHA1

    09a0a73b33e7ce235809ef54a81b483c0d4ef82c

    SHA256

    0950870cdee6183d7c494215d56f33badaad4af12fcad9d4634d0321f5ee0d80

    SHA512

    864206e9f7f139ea5cb4e19e4a33db393f79694aa9a720f7e45a0fa29cfd40977864c8ce3c5f6cbd340ef08fc73420ce19772dd3a7c069afed01ef1f52f41e47

  • C:\Users\Admin\AppData\Local\Temp\{42CE5207-16AF-4802-AAE9-5E8D992D70F1}\_Setup.dll

    Filesize

    206KB

    MD5

    3a5b7fa7135fa08357b444196218be68

    SHA1

    389baad44cb150e636218be67133e625cb80db85

    SHA256

    f5d9caab2d7ba5ac44f18b7a80ecbd203eec4ab82ed5bf5bc29429a72e7b3197

    SHA512

    79aacab15518fcb06c80330e5b5c9297af71dddaaf7e32af106c3eddd1c26a9a8c124357e4d8bc9d17843fc65157b57960d7c776c8afe08a2a325b50e1388cd3