Analysis
-
max time kernel
163s -
max time network
192s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 16:56
Static task
static1
Behavioral task
behavioral1
Sample
NEOoks.exe
Resource
win7-20221111-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEOoks.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
NEOoks.exe
-
Size
6.2MB
-
MD5
f0dd5bdf749961a52acf5773a52e5c9c
-
SHA1
2d966720c26abfee2750996f4d8dd3ebe261b12a
-
SHA256
1e0fb5f6ea7f5fee49c0651b87b3a606862041419b267b534ef14ed00861a3ce
-
SHA512
e55827fba8580e9a87bf84ca172b03a279cca4956299e4b3799784cacc48e5634bbe5c5819669a4dbbb2bb630207e857647ba0d041d197c1bba19ca3cb5e2ba0
-
SSDEEP
98304:Jrv1p0SzksF8mIu8dAfqJidQWftLtiBA6Ex1/vVYy7fUJteABdDrdj:JN2SosFIifrnfhtI5EHayzwkABdDBj
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2972 212 WerFault.exe NEOoks.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEOoks.exe"C:\Users\Admin\AppData\Local\Temp\NEOoks.exe"1⤵PID:212
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 212 -s 4842⤵
- Program crash
PID:2972
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 212 -ip 2121⤵PID:220