64305939b062ee59502f8f6710b9e7a34d65f7559f7baad9cbfcadef49e71366 | Triage

Analysis

max time kernel
137s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
14/10/2023, 19:14

Sharing

Report Analysis Logs

General

Target

NEAS.cfca665d75dd9fd0ca0c76a2347251f0.exe
Size

40KB
MD5

cfca665d75dd9fd0ca0c76a2347251f0
SHA1

ede798ee5201faeca18d5a2b211eecc191175745
SHA256

64305939b062ee59502f8f6710b9e7a34d65f7559f7baad9cbfcadef49e71366
SHA512

d1969a91674bd0db228d74044ba134449e542b4abe41b1856cf63ca8b81fbd22ccde94c0d6e09b92d3aaf5fdd5d40a136f97ae7c08465648ba4c0fc0de6bdc4b
SSDEEP

768:8Pq0SS6NNNNNNNNNNNNNNN9tDqAY1111:0gFNNNNNNNNNNNNNNNnn

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1848	4252	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\NEAS.cfca665d75dd9fd0ca0c76a2347251f0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.cfca665d75dd9fd0ca0c76a2347251f0.exe"
1⤵
PID:4252
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4252 -s 216
  2⤵
  - Program crash
  PID:1848

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4252 -ip 4252
1⤵
PID:4692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4252-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download