Analysis
-
max time kernel
150s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
-
submitted
07/11/2023, 01:55
General
-
Target
NEAS.3fb9ec13c080a9359a506f482e1bb460.exe
-
Size
5.0MB
-
MD5
3fb9ec13c080a9359a506f482e1bb460
-
SHA1
09112dcaf24e4583d892056a077b3022cf9469db
-
SHA256
f4d9b9ab34a6bddf0bce3ab5437ca909ced16253f7d4645da3a18cc4e53a5a0f
-
SHA512
49f520735a733f4b7092a3c1ed03574c4c8472204dd60bcec338738fcd7ccfad56b160f55e045bac26482700f59727f53a029380c35918fe513d394adf82a6c1
-
SSDEEP
98304:auwpwJDGLXehhlIG7hWjpAVrvspHTVW9ICdKlGfWNuSMU:Hwpw02lIG66ipzYiHlGON
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 16 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.3fb9ec13c080a9359a506f482e1bb460.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.3fb9ec13c080a9359a506f482e1bb460.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
19.5MB
-
Filesize
3.8MB
-
Filesize
4KB
-
Filesize
6.9MB
-
Filesize
19.5MB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
19.5MB
-
Filesize
256KB
-
Filesize
3.8MB
-
Filesize
19.5MB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
1024KB
-
Filesize
256KB
-
Filesize
19.5MB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
19.5MB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
19.5MB
-
Filesize
1024KB
-
Filesize
19.5MB
-
Filesize
19.5MB
-
Filesize
19.5MB
-
Filesize
19.5MB
-
Filesize
1024KB
-
Filesize
19.5MB
-
Filesize
1024KB
-
Filesize
19.5MB
-
Filesize
19.5MB
-
Filesize
19.5MB
-
Filesize
19.5MB
-
Filesize
19.5MB