6bef12b37d4c7b3d0ab50f9fb50d7ac5f242e1b3734b8a52981aad33cb408c13

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
05/11/2023, 09:44

Target

NEAS.e89000ebafddc9fcc63f628e777fbec0_JC.exe
Size

656KB
MD5

e89000ebafddc9fcc63f628e777fbec0
SHA1

11fcd25231db850f38b0d1b46120bd431a9d5654
SHA256

6bef12b37d4c7b3d0ab50f9fb50d7ac5f242e1b3734b8a52981aad33cb408c13
SHA512

f6e9962c81d5505d61df53bd1348e05d2e3c06261dc8b7de9ad74889e18233035edbfd10600da12356ac6866c1d58bdc36ccfe0dea0a3a4d57d50510a72db18a
SSDEEP

6144:c08p9uIVlfV3p2QZDyzdYwg92krimolrjzKgga5fD+tKXz7+GdQ6ee+LaP/pn0sZ:g9TbflpFNpl76ee+LaP/9ToBKQe

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2276-0-0x0000000000400000-0x00000000004A5000-memory.dmp	upx
behavioral1/files/0x0007000000014c3c-5.dat	upx
behavioral1/memory/2276-102-0x0000000000400000-0x00000000004A5000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	NEAS.e89000ebafddc9fcc63f628e777fbec0_JC.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.e89000ebafddc9fcc63f628e777fbec0_JC.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.e89000ebafddc9fcc63f628e777fbec0_JC.exe"
1⤵
- Drops file in Windows directory
PID:2276

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Filesize
656KB

MD5
e89000ebafddc9fcc63f628e777fbec0

SHA1
11fcd25231db850f38b0d1b46120bd431a9d5654

SHA256
6bef12b37d4c7b3d0ab50f9fb50d7ac5f242e1b3734b8a52981aad33cb408c13

SHA512
f6e9962c81d5505d61df53bd1348e05d2e3c06261dc8b7de9ad74889e18233035edbfd10600da12356ac6866c1d58bdc36ccfe0dea0a3a4d57d50510a72db18a

Download Submit
memory/2276-0-0x0000000000400000-0x00000000004A5000-memory.dmp

Filesize
660KB

Download
memory/2276-102-0x0000000000400000-0x00000000004A5000-memory.dmp

Filesize
660KB

Download