Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
16-11-2023 23:59
General
-
Target
NEAS.4da7f241ac7b90a535585f5e01c1f710.exe
-
Size
800KB
-
MD5
4da7f241ac7b90a535585f5e01c1f710
-
SHA1
846e81fca8e4a7a09f131ecd2cfa2d0ab21b4ba2
-
SHA256
4dfde96885736093f9c9ede7a244f03ab1d7cf600307c9489ed4ec4bce91170f
-
SHA512
2d25e34305ce17c4a0c78448c52df430b23e1203054871d10ba7aa3ac00b0fc08a166c77bca695f85df1a1d739dbeeee55415464912a5466fb8daf4a0ab1fe63
-
SSDEEP
24576:ZX7lEr+x6QLcsB+/h080FRLjftv9J1dT8OqIDbr1TGRkoh3AIV:Z5Er+QQgsB+/DcRnPvdaIz1TIX
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.4da7f241ac7b90a535585f5e01c1f710.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.4da7f241ac7b90a535585f5e01c1f710.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
3.2MB
-
Filesize
3.2MB