b4593395a6a9c078002cd491237e0e3fcb002238ddbf3844bb98d37d0b6bd531 | Triage

Analysis

max time kernel
168s
max time network
182s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
16-10-2023 18:25

Sharing

Report Analysis Logs

General

Target

NEAS.78d93e48299f88ed2f3f5d12f51d6c50.exe
Size

40KB
MD5

78d93e48299f88ed2f3f5d12f51d6c50
SHA1

931e7782d10b66c39d3e42bc2c6da4fa8c58cf0d
SHA256

b4593395a6a9c078002cd491237e0e3fcb002238ddbf3844bb98d37d0b6bd531
SHA512

f1f54a7812b65f851637e6762e0b47083668355b090978fdfa7bb9d4e906d21b06e1bbdddb161377f0430d3dcd123ee091277a61dab4a98dd40a46825bb4d2c0
SSDEEP

384:xxmpMY7aaADiBiV5GZJa5qDE045Hc3333:/mmXTG8+JMwA

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3788	4944	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\NEAS.78d93e48299f88ed2f3f5d12f51d6c50.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.78d93e48299f88ed2f3f5d12f51d6c50.exe"
1⤵
PID:4944
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4944 -s 216
  2⤵
  - Program crash
  PID:3788

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4944 -ip 4944
1⤵
PID:2564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4944-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download