9f4fdb17e23007f5a2e1ae3c3fd2a75b0faeb1aec2eabb8306172661d5f64b97

Analysis

max time kernel
142s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231025-en
resource tags

arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system
submitted
06/11/2023, 01:24

Target

NEAS.05ae8ed08b609356d0c195bc6fec48f0.exe
Size

58KB
MD5

05ae8ed08b609356d0c195bc6fec48f0
SHA1

a2dbbe1e4513277f2a0221c6950d917c7000c344
SHA256

9f4fdb17e23007f5a2e1ae3c3fd2a75b0faeb1aec2eabb8306172661d5f64b97
SHA512

8eac0291bbe7a41e7699539ea356c619918869e99b44947cd2b215c000054d1a1c899aed29ede14f46de40d57269aef3fb4cc45471d45e0b80eb8343edf40a22
SSDEEP

1536:tHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVtLl8k:tHoLde/OgV432UcP39hXJZn5Z

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4564-0-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral2/files/0x0006000000022e10-5.dat	upx
behavioral2/memory/4564-102-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	NEAS.05ae8ed08b609356d0c195bc6fec48f0.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.05ae8ed08b609356d0c195bc6fec48f0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.05ae8ed08b609356d0c195bc6fec48f0.exe"
1⤵
- Drops file in Windows directory
PID:4564

C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Filesize
58KB

MD5
05ae8ed08b609356d0c195bc6fec48f0

SHA1
a2dbbe1e4513277f2a0221c6950d917c7000c344

SHA256
9f4fdb17e23007f5a2e1ae3c3fd2a75b0faeb1aec2eabb8306172661d5f64b97

SHA512
8eac0291bbe7a41e7699539ea356c619918869e99b44947cd2b215c000054d1a1c899aed29ede14f46de40d57269aef3fb4cc45471d45e0b80eb8343edf40a22

Download Submit
memory/4564-0-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/4564-102-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download