Analysis

  • max time kernel
    135s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/11/2023, 20:50

General

  • Target

    NEAS.9e02e1dab8dae3a46694224ffd7a9b70.exe

  • Size

    1.0MB

  • MD5

    9e02e1dab8dae3a46694224ffd7a9b70

  • SHA1

    4e55f27fb49b611154741a35541356045f108db9

  • SHA256

    35b573ac62ccb68925fb3d78008afec4afd415796892588806525b95ad55d4d0

  • SHA512

    3ac78cdcccfad7fc643511153789cc90c6dee1303dc61cb94a30e9a748f8d1cce45a5ed9d0e74f8f1fe7a882325475fe34ed7de1d4e00a11fb657bd798d11903

  • SSDEEP

    24576:owk0VPpatOC0TOJTFfvz2PwoXXz+6F3dx3WxsFJ/rFG5q:PjPq0TOJTF3ATfHDFGk

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Modifies registry class 6 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.9e02e1dab8dae3a46694224ffd7a9b70.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.9e02e1dab8dae3a46694224ffd7a9b70.exe"
    1⤵
    • Drops file in Windows directory
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:4944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4944-0-0x0000000000400000-0x00000000004D2000-memory.dmp

    Filesize

    840KB

  • memory/4944-1-0x00000000006A0000-0x00000000006A1000-memory.dmp

    Filesize

    4KB

  • memory/4944-2-0x0000000000400000-0x00000000004D2000-memory.dmp

    Filesize

    840KB

  • memory/4944-3-0x00000000006A0000-0x00000000006A1000-memory.dmp

    Filesize

    4KB