Analysis
-
max time kernel
118s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20231025-en -
resource tags
-
submitted
11-11-2023 05:54
General
-
Target
NEAS.e06358da248ea5ec6d8fb2107baac070.exe
-
Size
1.5MB
-
MD5
e06358da248ea5ec6d8fb2107baac070
-
SHA1
d634a596f2e66d4a69b18d743267663a39b845b8
-
SHA256
dee230735c5a07e775c93cb3132b848b985612790c0b9cce3baff3fc5b5a197d
-
SHA512
9481cea106e81901bfee2320950ac524c137ba36244a826dd33fe2739fddb6603812c97133912db86b9b68fe2f116c3d0aa01d2c63763b8e84817465c6d1dbe5
-
SSDEEP
12288:s4aumlCSRBW8NGRP4Q+Eaw8lKnJlTxIWU8DUDwFi:zmlbBW8sRPEbyJlTaN8D1o
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.e06358da248ea5ec6d8fb2107baac070.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.e06358da248ea5ec6d8fb2107baac070.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.4MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
2.4MB