Analysis
-
max time kernel
139s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
14-10-2023 17:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.55f620b6bbf48ab427b53a3bcbd31b10.exe
Resource
win7-20230831-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.55f620b6bbf48ab427b53a3bcbd31b10.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
NEAS.55f620b6bbf48ab427b53a3bcbd31b10.exe
-
Size
14KB
-
MD5
55f620b6bbf48ab427b53a3bcbd31b10
-
SHA1
ab7c021be58754f3edcbb7455adee705c660217f
-
SHA256
d6d6789a8c4354c35156403a39f4189e6c1eeaa6b4900a96adde71852b98d804
-
SHA512
af71299fd60e6a560e0e3f5dce3e2149e36600bbb57fe9cfcf10f6783c39d4f18353b0b4b0a2ee212d77309bc03ca8a8ed815d95704fd553c67bddbb802e0744
-
SSDEEP
384:3zdU97YZoUcHqqD6n1lbwJLhdkJG+GDE045HOvv:3hU6cHq1nPwVbLAkvv
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3420 4688 WerFault.exe 18
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.55f620b6bbf48ab427b53a3bcbd31b10.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.55f620b6bbf48ab427b53a3bcbd31b10.exe"1⤵PID:4688
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4688 -s 2202⤵
- Program crash
PID:3420
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4688 -ip 46881⤵PID:3376