Analysis

  • max time kernel
    139s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/11/2023, 14:04

General

  • Target

    NEAS.94c94d4b6b7ae67c53dbd999d564eb80.exe

  • Size

    1.2MB

  • MD5

    94c94d4b6b7ae67c53dbd999d564eb80

  • SHA1

    2e35bc096665966440883ad40acdb89f8f23822c

  • SHA256

    942ca5311ba174dd14bf3f2c01ffc8a66f03cf200222d3b89e4f6ac088bf444e

  • SHA512

    0ad9ad1c5df1bdd441997b35613dbd7b658c1d9e7c048fa15762c22b1e0d82a3d0ccae0048a42d672481076faceabd72e4f2feeaad93580fbc86936d4f5b6817

  • SSDEEP

    24576:zQ7W8bnngXEllvh7KPXc6eK748gLQYd72w/rH9DZr7oV:EbbnlD52UlklpuJZr7E

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.94c94d4b6b7ae67c53dbd999d564eb80.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.94c94d4b6b7ae67c53dbd999d564eb80.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3344

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3344-3-0x00000000022F0000-0x00000000022F1000-memory.dmp

          Filesize

          4KB

        • memory/3344-4-0x00000000022F0000-0x00000000022F1000-memory.dmp

          Filesize

          4KB

        • memory/3344-2-0x00000000022F0000-0x00000000022F1000-memory.dmp

          Filesize

          4KB

        • memory/3344-5-0x00000000022F0000-0x00000000022F1000-memory.dmp

          Filesize

          4KB

        • memory/3344-6-0x00000000022F0000-0x00000000022F1000-memory.dmp

          Filesize

          4KB

        • memory/3344-7-0x00000000022F0000-0x00000000022F1000-memory.dmp

          Filesize

          4KB

        • memory/3344-8-0x00000000022F0000-0x00000000022F1000-memory.dmp

          Filesize

          4KB

        • memory/3344-9-0x00000000022F0000-0x00000000022F1000-memory.dmp

          Filesize

          4KB

        • memory/3344-10-0x00000000022F0000-0x00000000022F1000-memory.dmp

          Filesize

          4KB

        • memory/3344-11-0x00000000022F0000-0x00000000022F1000-memory.dmp

          Filesize

          4KB

        • memory/3344-12-0x00000000022F0000-0x00000000022F1000-memory.dmp

          Filesize

          4KB

        • memory/3344-13-0x00000000022F0000-0x00000000022F1000-memory.dmp

          Filesize

          4KB

        • memory/3344-14-0x00000000022F0000-0x00000000022F1000-memory.dmp

          Filesize

          4KB