88b0601666ed51a9a36fc1c509f21781544eccc5adeed14137fb3408680c6c9c

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
13/10/2023, 20:24

Target

NEAS.58b3be068dd467655849dfdc9c42d100.exe
Size

208KB
MD5

58b3be068dd467655849dfdc9c42d100
SHA1

97435b2db80570daf376cad0bd1a6327ca860493
SHA256

88b0601666ed51a9a36fc1c509f21781544eccc5adeed14137fb3408680c6c9c
SHA512

85f04d8187781152344c39b8e3045de64abba6264ed31795d57964a4c9f002653c52ee3a27cd840435baa591eb970b57dcb13733a97e1a69dfca25db36ab20db
SSDEEP

768:wAe3I1veEZC8hCkFsbWirTTIzvctbvFjW8rgt65P+oNMGQQ6/2p/1H5ZXdnhfepH:JmI1PZJWbWqTT0cVHgtk7tQQ6/2LtwL

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1288	2244	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 1288	2244	NEAS.58b3be068dd467655849dfdc9c42d100.exe	28
PID 2244 wrote to memory of 1288	2244	NEAS.58b3be068dd467655849dfdc9c42d100.exe	28
PID 2244 wrote to memory of 1288	2244	NEAS.58b3be068dd467655849dfdc9c42d100.exe	28
PID 2244 wrote to memory of 1288	2244	NEAS.58b3be068dd467655849dfdc9c42d100.exe	28

C:\Users\Admin\AppData\Local\Temp\NEAS.58b3be068dd467655849dfdc9c42d100.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.58b3be068dd467655849dfdc9c42d100.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2244 -s 36
  2⤵
  - Program crash
  PID:1288

memory/2244-0-0x0000000000400000-0x0000000000434000-memory.dmp

Filesize
208KB

Download