Analysis
-
max time kernel
120s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
-
submitted
05/11/2023, 00:24
General
-
Target
NEAS.c09766f3848c5b8ec558c89b68bd8050_JC.exe
-
Size
153KB
-
MD5
c09766f3848c5b8ec558c89b68bd8050
-
SHA1
6b05ec710ee41a54456c26e40af9871471d2e259
-
SHA256
b115aa093fe91660e22de3a555b0b2d873dba69a0a5f2160a3a31e30e148d0f0
-
SHA512
454b0a39cd088848dd15949ba9b59de824cb18c0150ba1af363f8df0d809834d517689669cb1a0af88ebb39de86514c149155f5c74f14844ff12c22722951057
-
SSDEEP
3072:O7O3iTDJD8ydpXUNGq+e8Qlfu0kNi7KHSd48e:8dTDJD8ydpcD+pQlfuXS+h
Score
10/10
Malware Config
Signatures
-
Suspicious use of NtCreateProcessExOtherParentProcess 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Windows\system32\lsass.exeC:\Windows\system32\lsass.exe1⤵
-
C:\Users\Admin\AppData\Local\Temp\NEAS.c09766f3848c5b8ec558c89b68bd8050_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.c09766f3848c5b8ec558c89b68bd8050_JC.exe"1⤵
- Suspicious use of NtCreateProcessExOtherParentProcess
- Suspicious use of AdjustPrivilegeToken