Analysis
-
max time kernel
124s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
11/11/2023, 04:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.d2b124504da27af033423ebc4ab8faf0.exe
Resource
win7-20231020-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.d2b124504da27af033423ebc4ab8faf0.exe
Resource
win10v2004-20231023-en
2 signatures
150 seconds
General
-
Target
NEAS.d2b124504da27af033423ebc4ab8faf0.exe
-
Size
577KB
-
MD5
d2b124504da27af033423ebc4ab8faf0
-
SHA1
ec98d2e3e9126c3da92affe2abb8dc13773f0da0
-
SHA256
883d71c9585dbf748dff0194f3f678554097da9471077bc13f226aca921f1b92
-
SHA512
11165bf6613277bc2f889d382565a6d27e0f3f6cc09115b881fe774a8094dbb2e3e9a392e375324179538764452187c80f40f722846e10a903c9b3ac6e3c1739
-
SSDEEP
12288:48+Tn6VMP5CPU6EkUw6XvV2NlLiwXmVmMdpx7TjLNFtA2byK9CTIb7:b+L6VMRCPU6CENltmVVdpx7fLrQWd
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe NEAS.d2b124504da27af033423ebc4ab8faf0.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 3956 NEAS.d2b124504da27af033423ebc4ab8faf0.exe