Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
16-10-2023 18:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.76f77170496d7722dde1422dc4fe0cf0.exe
Resource
win7-20230831-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.76f77170496d7722dde1422dc4fe0cf0.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
NEAS.76f77170496d7722dde1422dc4fe0cf0.exe
-
Size
204KB
-
MD5
76f77170496d7722dde1422dc4fe0cf0
-
SHA1
3539e0303772eb18ea361d278b43df890b269a4d
-
SHA256
2d7c65e7a5747f6847449c666201d4b75ede14ebd0ba6da5dce1177e4a045dca
-
SHA512
59c1d65be020a8c449c697cb7a57a693a1231ef3899dafd80ef589f87ee8f9b8cea85ebeaa6ca124b7986ed3cf1c805ec8dedd642ae3a9bdf204eec6bdc84407
-
SSDEEP
768:BDApAJmxwUh6zO5g7Wfb8BvTRbdUE6Sijv7xCIP2yajX/1H5UHvXdnhg:hsASwKScoNSLDhPPa9+F
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1604 3656 WerFault.exe 81 3752 3656 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.76f77170496d7722dde1422dc4fe0cf0.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.76f77170496d7722dde1422dc4fe0cf0.exe"1⤵PID:3656
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3656 -s 2242⤵
- Program crash
PID:1604
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3656 -s 2282⤵
- Program crash
PID:3752
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3656 -ip 36561⤵PID:3944
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 3656 -ip 36561⤵PID:3680