07bd9474e2a1d16ab7a22de9fb21984e9b397c570387dbf6108cb49190bf84a1

Analysis

max time kernel
141s
max time network
127s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
14/10/2023, 19:11

Target

NEAS.c070fa80c6065a3410af6133778d87b0.exe
Size

2.3MB
MD5

c070fa80c6065a3410af6133778d87b0
SHA1

eec6fd552a49776cdd0410ebd46d0941f7a27d43
SHA256

07bd9474e2a1d16ab7a22de9fb21984e9b397c570387dbf6108cb49190bf84a1
SHA512

6dd4e1a1addf5a9cd9c0b968fbc7599ad0ddcbca494827bbc9173581e08486772cd0d586ae90ba045ade1c4c5cfd7243cec08ca86ff2d4b93d967165c247afd4
SSDEEP

49152:kpvw3obTFzCULx6N8oaMwEMkiyIH5dGolKpfcEOrGk18FMIIPN3fjtkw0JJV:Aw4bBzCjJwEMHyU/acEOWFMIIPNvew0J

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1836	2240	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 1836	2240	NEAS.c070fa80c6065a3410af6133778d87b0.exe	28
PID 2240 wrote to memory of 1836	2240	NEAS.c070fa80c6065a3410af6133778d87b0.exe	28
PID 2240 wrote to memory of 1836	2240	NEAS.c070fa80c6065a3410af6133778d87b0.exe	28
PID 2240 wrote to memory of 1836	2240	NEAS.c070fa80c6065a3410af6133778d87b0.exe	28

C:\Users\Admin\AppData\Local\Temp\NEAS.c070fa80c6065a3410af6133778d87b0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.c070fa80c6065a3410af6133778d87b0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2240 -s 156
  2⤵
  - Program crash
  PID:1836

memory/2240-0-0x0000000000400000-0x0000000000901000-memory.dmp

Filesize
5.0MB

Download
memory/2240-1-0x0000000000400000-0x0000000000901000-memory.dmp

Filesize
5.0MB

Download