0b688aa6f4e6b544ef25bb33385535d6263cff9a844879d955448084cbd018fe | Triage

Analysis

max time kernel
133s
max time network
104s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
07/05/2024, 00:44

Sharing

Report Analysis Logs

General

Target

3ee72d6103ab7e5cfa85198d383cfc00_NEAS.dll
Size

3KB
MD5

3ee72d6103ab7e5cfa85198d383cfc00
SHA1

3ac20ef5c7e2d40134ed289018ccee6c59f19c2a
SHA256

0b688aa6f4e6b544ef25bb33385535d6263cff9a844879d955448084cbd018fe
SHA512

f5805fcfa0ad5f19a661f20dbc5d174e8af5c623960b34d535c7b40ccf1d020932ec7069f4fff48bf9b1683f6dcf60636e1614ebd6451eece9421509e8206562

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1680 wrote to memory of 2036	1680	rundll32.exe	83
PID 1680 wrote to memory of 2036	1680	rundll32.exe	83
PID 1680 wrote to memory of 2036	1680	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee72d6103ab7e5cfa85198d383cfc00_NEAS.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1680
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\3ee72d6103ab7e5cfa85198d383cfc00_NEAS.dll,#1
  2⤵
  PID:2036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads