1e2c7b90725526933cbb20934317222d00b9f7770bc0ea47a452517ea3d0dc45 | Triage

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
07/05/2024, 13:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

98471bb5cb6e6e0d29f0f56322a6ef60_NEAS.exe
Size

1.5MB
MD5

98471bb5cb6e6e0d29f0f56322a6ef60
SHA1

6d2248987fbad5eaa06511bddd6dfc9213ffcc1b
SHA256

1e2c7b90725526933cbb20934317222d00b9f7770bc0ea47a452517ea3d0dc45
SHA512

c44130e42ff9fbcbac3c46534ca9cb20f872025d6fb9e4c1cb27940f1eb7467dab1c903ca5bc2010d9fa0c6b0e4e546099b48660d7e9d38ddad3d1851522b52f
SSDEEP

24576:aYkIFRVyPP5OcKgJQ0j/z1sCh/C2VUwwtFSJ50DIpJ2YKk0DHFWsTJu3dsUexraw:LF/4PjKgG4/ziCh/C2Kq508J2wyHFlJx

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\98471bb5cb6e6e0d29f0f56322a6ef60_NEAS.exe
"C:\Users\Admin\AppData\Local\Temp\98471bb5cb6e6e0d29f0f56322a6ef60_NEAS.exe"
1⤵
PID:1720

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads