Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
07-05-2024 12:33
General
-
Target
7e19acb746b719152feae73f663021e0_NEAS.exe
-
Size
256KB
-
MD5
7e19acb746b719152feae73f663021e0
-
SHA1
1221d5c296ce44463f13d84a7289d05ee5a00c3f
-
SHA256
4fc45db4230d211681d5b3c15da43f6e96c2b6514a8e219572b4ff05e1526fc2
-
SHA512
0c7fe43d708e158954e813eb85bf528614d84f00e76bf2ac2ad62d1a75f52d7be58d195a2385d581cb72700f7d82c735b52d1ce2377ee562ea4ecae0a1e1f968
-
SSDEEP
6144:jOuFuko0Y8OtlP2Wc/hfRIIW6Th6jTFRbf0eN0W7cyqCxSn1:jZEAJOj8/hKInh6XFRbf0ez0n1
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7e19acb746b719152feae73f663021e0_NEAS.exe"C:\Users\Admin\AppData\Local\Temp\7e19acb746b719152feae73f663021e0_NEAS.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\7e19acb746b719152feae73f663021e0_NEAS.exeC:\Users\Admin\AppData\Local\Temp\7e19acb746b719152feae73f663021e0_NEAS.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
256KB
MD57017d2e4282f08574287a82e60025044
SHA142d354abc7f16c9d13a3ea629efdc2fff7c579df
SHA256d483dbbdb87b488f6bae3a1daced78621d9a805b58771aad9f5374bf56df0d06
SHA512bed6dcb1beafc2d9b1267cf072403f4a9f00ed4c4a7c6db85d61fe42b36fd325d858d3b1a852c8776444449a38f58b137fc362676f80264c8399f243484962d8
-
Filesize
256KB
-
Filesize
84KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB