Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
12-11-2023 17:07
General
-
Target
NEAS.dc2f30c0f6b264bc47ff6420a9a8ca4e.exe
-
Size
175KB
-
MD5
dc2f30c0f6b264bc47ff6420a9a8ca4e
-
SHA1
26ccb28cde2721029b99f75d432a5fcbf8fbcb07
-
SHA256
e6211b9a6fdf7e795ff58386592b6c8736c334ca96b81c62b6833e92012adfd1
-
SHA512
9027d2082082836dc409772365e065be5615345bb7361bd5679d3ca8e77c2be89818767c913ecc9fa621c9b1eb787b4bd636d50ce29ec42a3e45e913f502f89f
-
SSDEEP
3072:SDSOeCfbJDF8Y8iQsar6K0suoY/96dlL/4bPy:jOeM1OliQ5rsHP/cdJEP
Score
7/10
Malware Config
Signatures
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\NEAS.dc2f30c0f6b264bc47ff6420a9a8ca4e.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.dc2f30c0f6b264bc47ff6420a9a8ca4e.exe"2⤵
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
208KB
-
Filesize
64KB
-
Filesize
96KB
-
Filesize
104KB
-
Filesize
96KB
-
Filesize
104KB