ab20079365fb289b4e96a9d6952ee273dd411291a34c683bdd7581b7d206f2d3 | Triage

Analysis

max time kernel
22s
max time network
22s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
29/04/2024, 18:43

Sharing

Reason

Machine shutdown

Report Analysis Logs

General

Target

NeonWare Temp Spoofer.exe
Size

593KB
MD5

926f16c2379a8241399763b2fb4e4972
SHA1

170f1000b4b06ffc9cae34d970d01ee73e42acbe
SHA256

ab20079365fb289b4e96a9d6952ee273dd411291a34c683bdd7581b7d206f2d3
SHA512

0a536d6b71a5a38bb6b9961cefae911db31ba0daaa98ea7d068d9c763e88af582d335770fdece9c88a5b19b64d569bb71f6d1e9e3824f9560ee9eabbe95655a1
SSDEEP

12288:jlslE2ujpxu1Un44WcydzARY3EgHm1R6G0velDhXN35P:Js72pyUnqtdzAR+EA+l3lhpR

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\NeonWare Temp Spoofer.exe
"C:\Users\Admin\AppData\Local\Temp\NeonWare Temp Spoofer.exe"
1⤵
PID:2148

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x0
1⤵
PID:2600

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x1
1⤵
PID:2652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2600-0-0x0000000002D90000-0x0000000002D91000-memory.dmp

Filesize
4KB

Download
memory/2652-1-0x0000000002AB0000-0x0000000002AB1000-memory.dmp

Filesize
4KB

Download