Analysis

  • max time kernel
    140s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/05/2024, 06:16

General

  • Target

    7ea3e61489daa3cfd6799c1bbf7214f0_NEAS.exe

  • Size

    83KB

  • MD5

    7ea3e61489daa3cfd6799c1bbf7214f0

  • SHA1

    c7a723ed6f78ab56507d50dd32133e681c6b8286

  • SHA256

    9ee9cc87daf2729f75e85c48827127a8d9267997212321dd5676a21d6d6f8ab5

  • SHA512

    cac966e25b068d4e4075e8156bf3f18407762f089f80a45fc4e7b0a7aad2b54f3e2669214736d1f0f99a69d4d715cc71b485065b0cdc9723881c3e96657531d7

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+vK:LJ0TAz6Mte4A+aaZx8EnCGVuv

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\7ea3e61489daa3cfd6799c1bbf7214f0_NEAS.exe
    "C:\Users\Admin\AppData\Local\Temp\7ea3e61489daa3cfd6799c1bbf7214f0_NEAS.exe"
    1⤵
      PID:5188

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-Qpcs0PhFrqtW5A0S.exe

      Filesize

      83KB

      MD5

      8bd6034b33a0624c932275f3626b7642

      SHA1

      bdb89d5b97df1335c17f400b501dfaac6d7f32f5

      SHA256

      149d2001ed97a04272f8b264b119cda54322829c3ebe10694017a3da96d638ab

      SHA512

      44b2aa3df90c8ab663f4642bad24852350159ea7b4631d71165b181226a3bec4cd235ef96b8a723712562ee65c9039208eff27543e919fb3845d25b7885c52eb

    • memory/5188-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/5188-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/5188-7-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/5188-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/5188-21-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/5188-28-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB