3042a76fe4ba8490607fb62a0af0555d5e52024950108c41cd664b3a70ba45ec | Triage

Analysis

max time kernel
174s
max time network
165s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
13-10-2023 20:12

Sharing

Report Analysis Logs

General

Target

NEAS.39d62aa30c0f39428880c01ea621d5b0.exe
Size

14KB
MD5

39d62aa30c0f39428880c01ea621d5b0
SHA1

7a261c69bce86ab9946406508d6f1f4d08e31b19
SHA256

3042a76fe4ba8490607fb62a0af0555d5e52024950108c41cd664b3a70ba45ec
SHA512

f6612c8737438046dc318a33be95bb43c7c89f1c1a59e514c7b2fd8be4b51c1cce43494ae2366f692c4c5c7a1719c26223be6c2497fbccd070ab1e6e252f4ad6
SSDEEP

384:Zt/9/rwfCv1mVKRkYDE045HtJJJJJJJJJ:r1Twfa1mVK5AHJJJJJJJJJ

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4464	4288	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\NEAS.39d62aa30c0f39428880c01ea621d5b0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.39d62aa30c0f39428880c01ea621d5b0.exe"
1⤵
PID:4288
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4288 -s 224
  2⤵
  - Program crash
  PID:4464

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4288 -ip 4288
1⤵
PID:1364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4288-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4288-1-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download