Analysis

  • max time kernel
    140s
  • max time network
    106s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/05/2024, 13:54

General

  • Target

    ad5acf8c9da1c70ee5a6f8336d76ada0_NEAS.exe

  • Size

    4.9MB

  • MD5

    ad5acf8c9da1c70ee5a6f8336d76ada0

  • SHA1

    51b96f9d3199157ef1615c59ba44c6d670d01ad3

  • SHA256

    b153394e2e0ab68cf1f39f258a344cff6b596bfbbc2e88fe128bcdf737ee8482

  • SHA512

    e8c2110f6883c2fe515dfa43baa73e53b332a2bc9f55239a8826e92b3ffc797d3b5a5ebcee1bd7e975acaf2cb904f633a331ca8489f0d78cdae91dfe6463de70

  • SSDEEP

    98304:3fzwPVqFgqMvt/cps8TgXyN4e/kcLsaHfXdyV024bMQtR2B2+kQUa7h44eJV80f9:PzwPt/AfuizHfXMV0ZLgB4a8380WP+

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\ad5acf8c9da1c70ee5a6f8336d76ada0_NEAS.exe
    "C:\Users\Admin\AppData\Local\Temp\ad5acf8c9da1c70ee5a6f8336d76ada0_NEAS.exe"
    1⤵
      PID:5824

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5824-0-0x0000000000400000-0x0000000000B53000-memory.dmp

      Filesize

      7.3MB

    • memory/5824-1-0x00000000776F0000-0x0000000077905000-memory.dmp

      Filesize

      2.1MB

    • memory/5824-3274-0x0000000000400000-0x0000000000B53000-memory.dmp

      Filesize

      7.3MB