22caa5a9ff42ac59ec35a8d85fce172cbbca84ae6f6f07b574e68e4ea5476ab7

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20231025-en
resource tags

arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
submitted
05/11/2023, 21:01

Target

NEAS.014c7e5d18e745b53c0ca2ed0fbec620.exe
Size

67KB
MD5

014c7e5d18e745b53c0ca2ed0fbec620
SHA1

b0a6786d4d550fd71561e0d0d165861bc4e12131
SHA256

22caa5a9ff42ac59ec35a8d85fce172cbbca84ae6f6f07b574e68e4ea5476ab7
SHA512

328b92e5a95bcb7727fe2ac006bd9d8e5dd287f3124c8e6a73b65084f297abb71d9b303d7095aa6aac74929578f1d701878e771b472244cb71c6094305414f74
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtWc++JejnYJke:tHoLde/OgV432UcP39hXJZnWcPJHke

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2916-7-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral1/files/0x00070000000162d5-4.dat	upx
behavioral1/memory/2916-102-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	NEAS.014c7e5d18e745b53c0ca2ed0fbec620.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.014c7e5d18e745b53c0ca2ed0fbec620.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.014c7e5d18e745b53c0ca2ed0fbec620.exe"
1⤵
- Drops file in Windows directory
PID:2916

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Filesize
67KB

MD5
014c7e5d18e745b53c0ca2ed0fbec620

SHA1
b0a6786d4d550fd71561e0d0d165861bc4e12131

SHA256
22caa5a9ff42ac59ec35a8d85fce172cbbca84ae6f6f07b574e68e4ea5476ab7

SHA512
328b92e5a95bcb7727fe2ac006bd9d8e5dd287f3124c8e6a73b65084f297abb71d9b303d7095aa6aac74929578f1d701878e771b472244cb71c6094305414f74

Download Submit
memory/2916-7-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2916-102-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download