Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
07/05/2024, 12:45
General
-
Target
8625fd3d96fd3d9e5bd7d01523514550_NEAS.exe
-
Size
586KB
-
MD5
8625fd3d96fd3d9e5bd7d01523514550
-
SHA1
b77e6130508105caf8791df1d706fe49b9c98d80
-
SHA256
a306a79f116b10a6ed9b8c78e18f7efa8a8b85c49bf798d035d5d5bcaaf00144
-
SHA512
96ea8427acb1fa64d8579459b80d28279611fe25e7731fc4c07a29f779d68d061e16e04bcf9f1371d8576534d6de21d03fc8ab5183383479419fa7e3dfe92366
-
SSDEEP
12288:HplrVbDdQaqdS/RfraFE/H8uB2Wm0SXsNr5FU:pxR1+FCcuvm0as
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8625fd3d96fd3d9e5bd7d01523514550_NEAS.exe"C:\Users\Admin\AppData\Local\Temp\8625fd3d96fd3d9e5bd7d01523514550_NEAS.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\distribution\dependant.exe"C:\Program Files\distribution\dependant.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
587KB
MD5587118a60efcba6409aa5012375bf6e7
SHA135918fa8b06a3be3ad735afdfa92c1af32a557de
SHA2567004387569dce8a66f1cf798edc192a9281b76342f834f34ffd3d952eb6bf60e
SHA512d36a125be14f15c1289d15c2b7443d9083aa9b1f6e0296fb6b920b7e2d9717d3f73089cd0131f8dd30bfa8f9b7ca468298478b0d2397f58e487961b88ef89680
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB