Analysis
-
max time kernel
138s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
07-11-2023 16:16
General
-
Target
NEAS.78cbc1c2986c9d7934da787019a37f90.exe
-
Size
819KB
-
MD5
78cbc1c2986c9d7934da787019a37f90
-
SHA1
d41a68e23e4d20840bcde2b985e39704323f5f97
-
SHA256
b2663fe75ec8ee29a489e77b03a8eadc6019f66b18dbd2f1a0dd5144feaf70a6
-
SHA512
707b88e660df2e4e1c5d4a56d0c1f97fb87f4168b5b0fa2f6ca98c908ff0c6e06b72bbece0537c604154e373cc36c87c04d11bd48d4052f99c1ffc805abddcaf
-
SSDEEP
12288:3CdOy3vVrKxR5CXbNjAOxK/j2n+4YG/6c1mFFja3mXgcjfRlgsUBgaA5bQ:3Cdxte/80jYLT3U1jfsWaA5bQ
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 18 IoCs
-
Suspicious use of SendNotifyMessage 18 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.78cbc1c2986c9d7934da787019a37f90.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.78cbc1c2986c9d7934da787019a37f90.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage