Analysis

  • max time kernel
    147s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-10-2023 18:25

General

  • Target

    NEAS.76f77170496d7722dde1422dc4fe0cf0.exe

  • Size

    204KB

  • MD5

    76f77170496d7722dde1422dc4fe0cf0

  • SHA1

    3539e0303772eb18ea361d278b43df890b269a4d

  • SHA256

    2d7c65e7a5747f6847449c666201d4b75ede14ebd0ba6da5dce1177e4a045dca

  • SHA512

    59c1d65be020a8c449c697cb7a57a693a1231ef3899dafd80ef589f87ee8f9b8cea85ebeaa6ca124b7986ed3cf1c805ec8dedd642ae3a9bdf204eec6bdc84407

  • SSDEEP

    768:BDApAJmxwUh6zO5g7Wfb8BvTRbdUE6Sijv7xCIP2yajX/1H5UHvXdnhg:hsASwKScoNSLDhPPa9+F

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.76f77170496d7722dde1422dc4fe0cf0.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.76f77170496d7722dde1422dc4fe0cf0.exe"
    1⤵
      PID:3656
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3656 -s 224
        2⤵
        • Program crash
        PID:1604
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3656 -s 228
        2⤵
        • Program crash
        PID:3752
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3656 -ip 3656
      1⤵
        PID:3944
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 3656 -ip 3656
        1⤵
          PID:3680

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3656-0-0x0000000000400000-0x0000000000433000-memory.dmp

          Filesize

          204KB