1aa67ccef16afcaa3250dc5a43b145453845350062692b209c3363cfe349ffd4

Analysis

max time kernel
142s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
05-11-2023 09:25

Target

NEAS.2ff137ece2d51ef10b9583b001c63c80.exe
Size

58KB
MD5

2ff137ece2d51ef10b9583b001c63c80
SHA1

d965c15b0881b5f83c949258d7d4aeb3ae316b7d
SHA256

1aa67ccef16afcaa3250dc5a43b145453845350062692b209c3363cfe349ffd4
SHA512

12cf72905e7d448cfadb0ca656d22d0ecf2d304aced71610ed51a3e198fbfeb4709ade061b752c5d04ca82b0b34e4ba4baf0a99ae1ff74f4d8dadab1e212288c
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtly:tHoLde/OgV432UcP39hXJZn4

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4168-0-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral2/files/0x0007000000022e42-4.dat	upx
behavioral2/memory/4168-102-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	NEAS.2ff137ece2d51ef10b9583b001c63c80.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.2ff137ece2d51ef10b9583b001c63c80.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.2ff137ece2d51ef10b9583b001c63c80.exe"
1⤵
- Drops file in Windows directory
PID:4168

C:\Windows\Temp\[DiVX] Harry Potter And The Sorcerors Stone Full Downloader.exe

Filesize
58KB

MD5
2ff137ece2d51ef10b9583b001c63c80

SHA1
d965c15b0881b5f83c949258d7d4aeb3ae316b7d

SHA256
1aa67ccef16afcaa3250dc5a43b145453845350062692b209c3363cfe349ffd4

SHA512
12cf72905e7d448cfadb0ca656d22d0ecf2d304aced71610ed51a3e198fbfeb4709ade061b752c5d04ca82b0b34e4ba4baf0a99ae1ff74f4d8dadab1e212288c

Download Submit
memory/4168-0-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/4168-102-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download