54cf4f4b949db42e6cdf5a5fc35bcf8ae7ca5b732cc7f2eff43205129603825c

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
07/05/2024, 00:35

Target

3d894fee4deaadf88f9986334a9835f0_NEAS.exe
Size

73KB
MD5

3d894fee4deaadf88f9986334a9835f0
SHA1

200c81b70d6ab1b0133fea8a266a9335e986f857
SHA256

54cf4f4b949db42e6cdf5a5fc35bcf8ae7ca5b732cc7f2eff43205129603825c
SHA512

5000af68fe40a1abe648d20b59f9c1150579483f072f696e6f311af9f4dadc48a9baf41eb7dc32e73eb0d56046b3a76dce04ad9b1522e87fed1908fd94236cd8
SSDEEP

1536:14R9KzUD5X66zFOa2INL0U/zDDiGPsMI7MPeDm5E7:2KzAXXzFt2INJ/4MPuqU

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2184	argeaxep-oudoas.exe

Loads dropped DLL 1 IoCs

pid	Process
2156	3d894fee4deaadf88f9986334a9835f0_NEAS.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\argeaxep-oudoas.exe	3d894fee4deaadf88f9986334a9835f0_NEAS.exe
File created	C:\Windows\SysWOW64\argeaxep-oudoas.exe	3d894fee4deaadf88f9986334a9835f0_NEAS.exe

C:\Users\Admin\AppData\Local\Temp\3d894fee4deaadf88f9986334a9835f0_NEAS.exe
"C:\Users\Admin\AppData\Local\Temp\3d894fee4deaadf88f9986334a9835f0_NEAS.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2156
- C:\Windows\SysWOW64\argeaxep-oudoas.exe
  "C:\Windows\SysWOW64\argeaxep-oudoas.exe"
  2⤵
  - Executes dropped EXE
  PID:2184

\Windows\SysWOW64\argeaxep-oudoas.exe

Filesize
69KB

MD5
00e0aacbc53cdb984bed6e6956272ed1

SHA1
42fb657003ea8038ff17fbc12c47437d45fafc04

SHA256
dbe87f28580d8ae29eb6a2151406307d79d03ff5276cd8b1086ecf7ba6cc1b09

SHA512
84cb4eba0c36f5412e757128561e03b921adc9c9a9ace0a21dd624c239524cc0611d4fb4f296ac69c8d6add2dd580f8cd49888587f9bbf7b39c1263fa8ab04df

Download Submit
memory/2156-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download