Analysis

  • max time kernel
    118s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    17/11/2023, 23:51

General

  • Target

    NEAS.f3842771e45ce07c3a4b7735c65e3830.exe

  • Size

    954KB

  • MD5

    f3842771e45ce07c3a4b7735c65e3830

  • SHA1

    f1f4051a68979cbea94eb3e1ac7002da8cbc8a52

  • SHA256

    b5be7279cfc915a38f5279c04feadc131f74320eb40f3df6778e13b60cf5ff98

  • SHA512

    e121e0c4aeb04105d8b878b901563a7e1e4a8f6f7316034fd3cc3022e254616d843104004c744da14ac5580ce73596246b90cdd0dc54951f952cdd04128f8585

  • SSDEEP

    12288:zJB0lh5aILwtFPCfmARvuZYARIRs40rFHTmRCGsye3nARobiesLDoG16B8ZfzQiE:zQ5aILMCfmARvKYYtJh1Aaa3vpt1R72

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.f3842771e45ce07c3a4b7735c65e3830.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.f3842771e45ce07c3a4b7735c65e3830.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2184

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2184-3-0x0000000000620000-0x0000000000621000-memory.dmp

          Filesize

          4KB

        • memory/2184-2-0x0000000000620000-0x0000000000621000-memory.dmp

          Filesize

          4KB

        • memory/2184-5-0x0000000000620000-0x0000000000621000-memory.dmp

          Filesize

          4KB

        • memory/2184-4-0x0000000000620000-0x0000000000621000-memory.dmp

          Filesize

          4KB

        • memory/2184-6-0x0000000000620000-0x0000000000621000-memory.dmp

          Filesize

          4KB

        • memory/2184-7-0x0000000000620000-0x0000000000621000-memory.dmp

          Filesize

          4KB

        • memory/2184-8-0x0000000000620000-0x0000000000621000-memory.dmp

          Filesize

          4KB

        • memory/2184-9-0x0000000000620000-0x0000000000621000-memory.dmp

          Filesize

          4KB

        • memory/2184-10-0x0000000000620000-0x0000000000621000-memory.dmp

          Filesize

          4KB

        • memory/2184-11-0x0000000000620000-0x0000000000621000-memory.dmp

          Filesize

          4KB

        • memory/2184-13-0x0000000000620000-0x0000000000621000-memory.dmp

          Filesize

          4KB

        • memory/2184-12-0x0000000000620000-0x0000000000621000-memory.dmp

          Filesize

          4KB

        • memory/2184-14-0x0000000000620000-0x0000000000621000-memory.dmp

          Filesize

          4KB