29bcc1f1165bbc7c647aae98f0447587b62cf87423f6ab6f2996fd47ec5398d2 | Triage

Analysis

max time kernel
122s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
15-11-2023 00:16

Sharing

Report Analysis Logs

General

Target

NEAS.663737b9ef27d5b105f64ae143514af0.exe
Size

596KB
MD5

663737b9ef27d5b105f64ae143514af0
SHA1

ba501a207a7b3607ea352eda4764f6ea67c5d5eb
SHA256

29bcc1f1165bbc7c647aae98f0447587b62cf87423f6ab6f2996fd47ec5398d2
SHA512

08f27c7ca8973d180a65c0dd258d697b486584f5581adebb5799cb45e8264eeb3363acdacf9adba23f936e5eddbf40feffba1cc3fbfa40ab4f3c741ca99f9228
SSDEEP

6144:ux9xXgrlUoe+Mkx12ohM3pfAI85TVR+ZDY4FRi:Y1zAxJiYI85Tz+Zs4G

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2948	NEAS.663737b9ef27d5b105f64ae143514af0.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.663737b9ef27d5b105f64ae143514af0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.663737b9ef27d5b105f64ae143514af0.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2948-0-0x0000000000400000-0x000000000049A000-memory.dmp

Filesize
616KB

Download
memory/2948-1-0x0000000000400000-0x000000000049A000-memory.dmp

Filesize
616KB

Download
memory/2948-4-0x0000000000400000-0x000000000049A000-memory.dmp

Filesize
616KB

Download