Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 06:16

General

  • Target

    7ea3e61489daa3cfd6799c1bbf7214f0_NEAS.exe

  • Size

    83KB

  • MD5

    7ea3e61489daa3cfd6799c1bbf7214f0

  • SHA1

    c7a723ed6f78ab56507d50dd32133e681c6b8286

  • SHA256

    9ee9cc87daf2729f75e85c48827127a8d9267997212321dd5676a21d6d6f8ab5

  • SHA512

    cac966e25b068d4e4075e8156bf3f18407762f089f80a45fc4e7b0a7aad2b54f3e2669214736d1f0f99a69d4d715cc71b485065b0cdc9723881c3e96657531d7

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+vK:LJ0TAz6Mte4A+aaZx8EnCGVuv

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\7ea3e61489daa3cfd6799c1bbf7214f0_NEAS.exe
    "C:\Users\Admin\AppData\Local\Temp\7ea3e61489daa3cfd6799c1bbf7214f0_NEAS.exe"
    1⤵
      PID:2360

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-0d4DxqFQM5e4GVcU.exe

      Filesize

      83KB

      MD5

      f849c967581c6fac725237316854c5cc

      SHA1

      8ff3fd53c6f987a536e63439429a3b63df7d4adc

      SHA256

      eb5667ab3ce502fe91d56282975632663739a3f9536d7821b63242ccd9aa502f

      SHA512

      5a4d98283e2fe1eb9f534087d20dcaaebd4e913b0ee79a546b85ce7af58d1bfdbb7ebb0af950fdab5b454cc1c353642216bf54b5dd956c8b58da429910539f06

    • memory/2360-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2360-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2360-7-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2360-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2360-21-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2360-28-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB