060c87fdaf754f92c1a64e0182e0227bae150632042ec6cca489c870bfa93be1 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
07/05/2024, 08:33

Sharing

Report Analysis Logs

General

Target

0c7b50ecf1a549f43108326d545f3aa0_NEAS.exe
Size

1.2MB
MD5

0c7b50ecf1a549f43108326d545f3aa0
SHA1

8c34b66727cfcfb0ad3316f0cc200447d3e4beab
SHA256

060c87fdaf754f92c1a64e0182e0227bae150632042ec6cca489c870bfa93be1
SHA512

5a8818441d5b2f785b56d5cf637f679a26946ba27eecdfdf0457b901bf1340c963e5bc7a49106c33b6945265d827ceaf012f908e067c5c5105972192d4a6c429
SSDEEP

24576:Wvx4vxVss86TYPPjO7KX53RTh0tFda3w:Wvx4vxVss1TKrOO53RTqtiw

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Debug\WIA\wiatrace.log	0c7b50ecf1a549f43108326d545f3aa0_NEAS.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2016	0c7b50ecf1a549f43108326d545f3aa0_NEAS.exe

C:\Users\Admin\AppData\Local\Temp\0c7b50ecf1a549f43108326d545f3aa0_NEAS.exe
"C:\Users\Admin\AppData\Local\Temp\0c7b50ecf1a549f43108326d545f3aa0_NEAS.exe"
1⤵
- Drops file in Windows directory
- Suspicious behavior: GetForegroundWindowSpam
PID:2016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2016-0-0x000007FEF8400000-0x000007FEF844C000-memory.dmp

Filesize
304KB

Download
memory/2016-1-0x0000000000150000-0x0000000000151000-memory.dmp

Filesize
4KB

Download