764cfacf8ac84a645fb3ef6a67a4278396fa43c7eaeff73de813a25a8e5d75c2

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
05/11/2023, 07:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

NEAS.008cfa944b9083bde6f045c437ac71a0.exe
Size

230KB
MD5

008cfa944b9083bde6f045c437ac71a0
SHA1

8bf18e63e2cc3ce61375779d218177ab607884b1
SHA256

764cfacf8ac84a645fb3ef6a67a4278396fa43c7eaeff73de813a25a8e5d75c2
SHA512

b854a43c11c3fc0a10bbe571436393bf0adac5d04a0a58e40933382a5715f0bc8c1780c044fa62f10312b17f8e9a67f217737fcb46ae394c83bf451979c96d23
SSDEEP

3072:0ADxRJbMnL9CEbpTpWPZBeIWjFNh22cPbzTamdgBcLsbWeFnLuQ5CAlUYiuU7UF:T5gL91k3n6/IX+mdgWs6e8yC2UVuPF

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\FrequencyCheck.job	NEAS.008cfa944b9083bde6f045c437ac71a0.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.008cfa944b9083bde6f045c437ac71a0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.008cfa944b9083bde6f045c437ac71a0.exe"
1⤵
- Drops file in Windows directory
PID:2516

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2516-0-0x0000000000120000-0x0000000000160000-memory.dmp

Filesize
256KB

Download
memory/2516-2-0x0000000001770000-0x00000000017B0000-memory.dmp

Filesize
256KB

Download
memory/2516-3-0x00000000000F0000-0x000000000011F000-memory.dmp

Filesize
188KB

Download