78621f7ac387e29bde1c6fd1237f2ae17c51b23d373335a7f06407fa84f933d5

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
14/10/2023, 19:10

Target

NEAS.bc0a21bbef237997ec525845f7d50020.exe
Size

268KB
MD5

bc0a21bbef237997ec525845f7d50020
SHA1

9a21d5e73896490c7fae43ff2b1e86d76bc846ae
SHA256

78621f7ac387e29bde1c6fd1237f2ae17c51b23d373335a7f06407fa84f933d5
SHA512

39bfc709deb1bc8d691786b568df7c4d9d25d2bfe9db972363457a53fbe6e006ebe052d6698152937b488c0945d1704b45804a6d9c490849b287dd64b3a108f9
SSDEEP

3072:gC6xRyfFP0o35cc+rpOOxzFw0v0wnJcefSXQHPTTAkvB5Dd:gC6xRydsS+w+3tnJfKXqPTX7D

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2380	2360	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2360 wrote to memory of 2380	2360	NEAS.bc0a21bbef237997ec525845f7d50020.exe	28
PID 2360 wrote to memory of 2380	2360	NEAS.bc0a21bbef237997ec525845f7d50020.exe	28
PID 2360 wrote to memory of 2380	2360	NEAS.bc0a21bbef237997ec525845f7d50020.exe	28
PID 2360 wrote to memory of 2380	2360	NEAS.bc0a21bbef237997ec525845f7d50020.exe	28

C:\Users\Admin\AppData\Local\Temp\NEAS.bc0a21bbef237997ec525845f7d50020.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.bc0a21bbef237997ec525845f7d50020.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2360
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2360 -s 36
  2⤵
  - Program crash
  PID:2380

memory/2360-0-0x0000000000400000-0x0000000000443000-memory.dmp

Filesize
268KB

Download