Analysis

  • max time kernel
    141s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    18-11-2023 07:20

General

  • Target

    NEAS.bfc6f01564a4f3823c2b912e7b8fe0d0.exe

  • Size

    2.1MB

  • MD5

    bfc6f01564a4f3823c2b912e7b8fe0d0

  • SHA1

    5300581bb43d14a2c0ceecc0e3355886ee65f4d8

  • SHA256

    48124b3370cb0b27d7ba4f720beb7106f4995568ec916c2bfc5bbc153c1c320b

  • SHA512

    040a79adc15984a0f3478a9ea2c2c644340651cd5525037cc377732a6cddef1fde2ceb8783a374309217f380bdda2c913b9684dd8db3a210b7a8052842676071

  • SSDEEP

    49152:F2QHx4kwe1zbYHVTRme2805P4yok9b4TRTio2p71+:nRNzbYHl2JNb4Tf0Q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.bfc6f01564a4f3823c2b912e7b8fe0d0.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.bfc6f01564a4f3823c2b912e7b8fe0d0.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1196-0-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/1196-1-0x0000000000400000-0x000000000062F000-memory.dmp

    Filesize

    2.2MB

  • memory/1196-3-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/1196-4-0x0000000000400000-0x000000000062F000-memory.dmp

    Filesize

    2.2MB