Overview

overview

7

Static

static

7

NEAS.2e0f1...60.exe

windows7-x64

7

NEAS.2e0f1...60.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    120s
  • max time network
    180s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17-11-2023 03:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.2e0f159f68a9a5c494d8d3b43bd30f60.exe

  • Size

    120KB

  • MD5

    2e0f159f68a9a5c494d8d3b43bd30f60

  • SHA1

    0fa82cb200fcbe2a90b3cf0bb6447a28105ef1d0

  • SHA256

    609bc316721a13a0609add633f12464a9580d974e252202026676cfeabd3b0c1

  • SHA512

    70cad542d0c4f0c9056287e4b8834f185a47d28d34f42d7c8379131a21f69aa62cff51fd968ccdfbbb4f61ad374cc72cedc4aec81c28c9a6d68dcbe28ff6a47f

  • SSDEEP

    3072:JjzhZWxivgmhbI/pqqsFUCN3R96xI+TpgvQoutH4D:JXC4vgmhbIxs3NB+puQoSH4D

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.2e0f159f68a9a5c494d8d3b43bd30f60.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.2e0f159f68a9a5c494d8d3b43bd30f60.exe"
    1⤵
      PID:1232
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1232 -s 216
        2⤵
        • Program crash
        PID:2788
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1232 -ip 1232
      1⤵
        PID:3036

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1232-0-0x0000000000400000-0x000000000041E000-memory.dmp

        Filesize

        120KB

        Download