2742e8830d4b59fa80eb15e973578307e80f92087b4931938c499b59d32ae3ec

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
14/10/2023, 17:50

Target

NEAS.3310f1cb7abd6196cec3d4229a067c00.exe
Size

547KB
MD5

3310f1cb7abd6196cec3d4229a067c00
SHA1

de4717e433128644b8154d1e9ed4a976ae42e290
SHA256

2742e8830d4b59fa80eb15e973578307e80f92087b4931938c499b59d32ae3ec
SHA512

16e3dd4445526b76ad75594ffacdd6eb93f894cbdd46a32bc5b4815f839b3a47be8b7b34a85f639bfa5aaf0312d22e8fadb5077f4507d4198218d676d3edbebe
SSDEEP

3072:wCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VwMQTCk/dN92sdNhavtrVdewnAx3wmVw:wqDAwl0xPTMiR9JSSxPUKEdodH5d

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2320	1168	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1168 wrote to memory of 2320	1168	NEAS.3310f1cb7abd6196cec3d4229a067c00.exe	28
PID 1168 wrote to memory of 2320	1168	NEAS.3310f1cb7abd6196cec3d4229a067c00.exe	28
PID 1168 wrote to memory of 2320	1168	NEAS.3310f1cb7abd6196cec3d4229a067c00.exe	28
PID 1168 wrote to memory of 2320	1168	NEAS.3310f1cb7abd6196cec3d4229a067c00.exe	28

C:\Users\Admin\AppData\Local\Temp\NEAS.3310f1cb7abd6196cec3d4229a067c00.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.3310f1cb7abd6196cec3d4229a067c00.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1168
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1168 -s 36
  2⤵
  - Program crash
  PID:2320