Analysis

  • max time kernel
    140s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/05/2024, 12:51

General

  • Target

    8a2a9a11335af409f9fecdeb87923c40_NEAS.exe

  • Size

    2.4MB

  • MD5

    8a2a9a11335af409f9fecdeb87923c40

  • SHA1

    6572e8f9c033c8d7f837bbc30cbd3fa1f7ef46d5

  • SHA256

    19ed336ae28c12e4ceb4de5d7998e706de3a732be1a232e64d74a5245cf814cd

  • SHA512

    ee02a3288da1a173d1cedd7546d01511dbd8e9e412a57676af901afcfeaf6854db26792a004fe52a4476e6992335e5e46d3da7a9acd9fc15927d9e638b1d1e5b

  • SSDEEP

    49152:b7oFEQXbXAr8hAF4OX6Ty3AAv1o69w7RaWh:wF9LAkmJX13AAvn9wdaWh

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8a2a9a11335af409f9fecdeb87923c40_NEAS.exe
    "C:\Users\Admin\AppData\Local\Temp\8a2a9a11335af409f9fecdeb87923c40_NEAS.exe"
    1⤵
    • Drops file in Windows directory
    PID:1456

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\8a2a9a11335af409f9fecdeb87923c40_NEAS.ini

    Filesize

    2KB

    MD5

    deaa629fe42790035d07baa5c90f33ab

    SHA1

    428a3a0bf1b099b0dc0bf7ce309b21c00cecb235

    SHA256

    5a47753a311ba2a5251b610545f334a433517251cd4097572449fe718947467a

    SHA512

    deec64177b49e59a36960720c443451c887652efe0166c09bbad106d0c203a47f9df39f55cb1740943d771e53b0a451ba825374f85e240011abd6f397c09c08d

  • C:\Users\Admin\AppData\Local\Temp\8a2a9a11335af409f9fecdeb87923c40_NEAS.ini

    Filesize

    980B

    MD5

    ef741896116c1c76bff7b49502d1c85b

    SHA1

    2237712d5947ed50c75ca8e5935dfa06a0b7468f

    SHA256

    8786319872ef45b2368a29e4efcc67cdde26a94da6b49d52fe0ff52e0faea73e

    SHA512

    4457b2b209341ce92a533dcabaa6b8c7b4c4c55be2442e9d2e0d025aa0058a644e9bdff2ecbc93b89d3155f2915fa32b832017084b15162daa2277fc75fc4766

  • C:\Users\Admin\AppData\Local\Temp\8a2a9a11335af409f9fecdeb87923c40_NEAS.ini

    Filesize

    2KB

    MD5

    372ae5a588edfa06f5c9b707a8e9305e

    SHA1

    2f0f12989c509da1f761b4d9786ff2d305591524

    SHA256

    fbbe5441256b2d282a0ffe8ea1a0b4430ddff26419072a3c988e93a34c86cad4

    SHA512

    337c520c96b08736d7ce6a5a7f450d3f19608af7c801b4f2f3a8db7ba6b27086eee96c236c35b6bdd434c9707194d1eb87ee4ee364545dc4bf8fb926f148355b

  • C:\Users\Admin\AppData\Local\Temp\8a2a9a11335af409f9fecdeb87923c40_NEAS.ini

    Filesize

    2KB

    MD5

    656c5a49f4525dd89f123f09d33eec64

    SHA1

    85f57d89038286077b5e145055275a374e37bef9

    SHA256

    74fb03ff6354607275e1f98afd07cbfb28b923ffb863b84e5c8b2d3a5c28af37

    SHA512

    2645e2f3057eb46eabc6684e171a00cd81e3d09797ba399d6a9fa1b505c3d3a0e85b52b560125566cb018b588362650df70c810f60bd80eb29e8d69ae72a2c80

  • memory/1456-0-0x00000000026A0000-0x00000000026A1000-memory.dmp

    Filesize

    4KB

  • memory/1456-133-0x0000000000400000-0x000000000066A000-memory.dmp

    Filesize

    2.4MB

  • memory/1456-135-0x00000000026A0000-0x00000000026A1000-memory.dmp

    Filesize

    4KB