Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
05/11/2023, 22:06
General
-
Target
NEAS.2a8c223dd28b51d8fc35d4a5e9249c20.exe
-
Size
88KB
-
MD5
2a8c223dd28b51d8fc35d4a5e9249c20
-
SHA1
53566110f8e84751702640d373538199dda19b4c
-
SHA256
f600c8e90b887847fff0c0ab5e4d8098c2eebbca282d46161b890e78ded5980e
-
SHA512
b493c14abe5897dd3a0d1d4f4194f3083d3c632f1a6f9b1bcf901104941d97c0be362cc3a4807999264de345dbc074db02045cf0c180ff07b2e1b22bf9b7eac7
-
SSDEEP
1536:iZ55Ljoq4M2quFS7q4dRlRrKv3cFXY6lgdSyRT+6/OaWJOsIzrnClPjhAv8njCWy:gLjoq4M8FS2CTlKfUX6XDNHC9vnuW8nD
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.2a8c223dd28b51d8fc35d4a5e9249c20.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.2a8c223dd28b51d8fc35d4a5e9249c20.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\NEAS.2a8c223dd28b51d8fc35d4a5e9249c20.exeC:\Users\Admin\AppData\Local\Temp\NEAS.2a8c223dd28b51d8fc35d4a5e9249c20.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
-
Filesize
34KB
-
Filesize
36KB
-
Filesize
36KB
-
Filesize
76KB
-
Filesize
34KB
-
Filesize
76KB
-
Filesize
320KB
-
Filesize
12KB
-
Filesize
320KB
-
Filesize
320KB
-
Filesize
320KB