fb0da2d667fa2dad4436ef75f6eccc202e1b096ed2330dd17e397759550d8acb

Analysis

max time kernel
119s
max time network
128s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
14/10/2023, 18:05

Target

NEAS.92137393d05555d6f40f95266b926360.exe
Size

248KB
MD5

92137393d05555d6f40f95266b926360
SHA1

f453066ca414444d07bfa8aeac936717fcd4d0b3
SHA256

fb0da2d667fa2dad4436ef75f6eccc202e1b096ed2330dd17e397759550d8acb
SHA512

b685eb94461fcbe79e12d252202be86c026ff0010ded71f8bdb115311cb6fb567e823cb5f49742f8e02851c0311758ef6372c9959d55ca7e84316653c042eac2
SSDEEP

768:VkL7pwhEeHgFWYlZJ1KHJeCfI/Hv9nYPG3FMS//1H5gB8W44jzo1MkEJuUQW+21e:Y7pNeATl70HJeVYPG1RFy5YMkhohe

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2528	2416	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2416 wrote to memory of 2528	2416	NEAS.92137393d05555d6f40f95266b926360.exe	28
PID 2416 wrote to memory of 2528	2416	NEAS.92137393d05555d6f40f95266b926360.exe	28
PID 2416 wrote to memory of 2528	2416	NEAS.92137393d05555d6f40f95266b926360.exe	28
PID 2416 wrote to memory of 2528	2416	NEAS.92137393d05555d6f40f95266b926360.exe	28

C:\Users\Admin\AppData\Local\Temp\NEAS.92137393d05555d6f40f95266b926360.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.92137393d05555d6f40f95266b926360.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2416
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2416 -s 36
  2⤵
  - Program crash
  PID:2528

memory/2416-0-0x0000000000400000-0x000000000043E000-memory.dmp

Filesize
248KB

Download