Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231025-en -
resource tags
arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system -
submitted
12/11/2023, 07:57
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.c6daf9d3f3b2c956fe6b47a11b8cb2a0.exe
Resource
win7-20231025-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.c6daf9d3f3b2c956fe6b47a11b8cb2a0.exe
Resource
win10v2004-20231023-en
2 signatures
150 seconds
General
-
Target
NEAS.c6daf9d3f3b2c956fe6b47a11b8cb2a0.exe
-
Size
419KB
-
MD5
c6daf9d3f3b2c956fe6b47a11b8cb2a0
-
SHA1
0129bb1cb812d9b5b4f6b14ed49de21bf0c3856c
-
SHA256
41a5d90b62000e629847a86ca35efd1bd5be33ef0c4f72f18df20c2d25cc3513
-
SHA512
d5f6f7688ece047b20e446950b79ee12f673e9a1199b681cbe9a16fa9ff3f90b65793280c66d72f93f6a3d6065da5abef67d7ad540261efb33ffd87e6a204789
-
SSDEEP
6144:9CBHJmQ8KHidyFD5KV6H4EjhFSKMjVAOjEf7Uq9LW82TbJEg2ifW:wHkxdyFD5/H4EjnWV1WLWJmg2f
Score
1/10
Malware Config
Signatures
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B3635496-1D9E-4b21-8D56-04CAAD0064CB} NEAS.c6daf9d3f3b2c956fe6b47a11b8cb2a0.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B3635496-1D9E-4b21-8D56-04CAAD0064CB}\raid = "39BF67A97C9E699EFC6695F69311A585" NEAS.c6daf9d3f3b2c956fe6b47a11b8cb2a0.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 2256 NEAS.c6daf9d3f3b2c956fe6b47a11b8cb2a0.exe 2256 NEAS.c6daf9d3f3b2c956fe6b47a11b8cb2a0.exe 2256 NEAS.c6daf9d3f3b2c956fe6b47a11b8cb2a0.exe 2256 NEAS.c6daf9d3f3b2c956fe6b47a11b8cb2a0.exe 2256 NEAS.c6daf9d3f3b2c956fe6b47a11b8cb2a0.exe 2256 NEAS.c6daf9d3f3b2c956fe6b47a11b8cb2a0.exe