Analysis
-
max time kernel
173s -
max time network
205s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
07-11-2023 19:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.f5cfbba0dc9718b5e03b137ab33158e0.exe
Resource
win7-20231020-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.f5cfbba0dc9718b5e03b137ab33158e0.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
NEAS.f5cfbba0dc9718b5e03b137ab33158e0.exe
-
Size
636KB
-
MD5
f5cfbba0dc9718b5e03b137ab33158e0
-
SHA1
1e4ed4836510ddf8ee93c7400f829ae38e202cd0
-
SHA256
614d9ab994eb6ba1bcfae1280fbc0f25d43ac19aee5db1576d0cf1ab25cb19a2
-
SHA512
1837e3e6a71440914f7d0c7398201d5d618be80c439fff6b67f23c9f1cde84268c9cc250cd5c65de9e2f2ad0dc56f0a16606259bdff87ce5c5916ef9b4392d69
-
SSDEEP
12288:PG+9m0kI+O52aLZc3p7K3FgbJWkfwrm8xL68p:P3ky0adc31K1aWk8m8xL6g
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
pid Process 3624 NEAS.f5cfbba0dc9718b5e03b137ab33158e0.exe 3624 NEAS.f5cfbba0dc9718b5e03b137ab33158e0.exe 3624 NEAS.f5cfbba0dc9718b5e03b137ab33158e0.exe 3624 NEAS.f5cfbba0dc9718b5e03b137ab33158e0.exe 3624 NEAS.f5cfbba0dc9718b5e03b137ab33158e0.exe 3624 NEAS.f5cfbba0dc9718b5e03b137ab33158e0.exe 3624 NEAS.f5cfbba0dc9718b5e03b137ab33158e0.exe 3624 NEAS.f5cfbba0dc9718b5e03b137ab33158e0.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3624 NEAS.f5cfbba0dc9718b5e03b137ab33158e0.exe 3624 NEAS.f5cfbba0dc9718b5e03b137ab33158e0.exe