99b2e5d0e83ef289bac19c9627c7365d51015428301270b7aeb140752072704c | Triage

Analysis

max time kernel
97s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
16/10/2023, 18:28

Sharing

Report Analysis Logs

General

Target

NEAS.8e1fad1ef623f41c792ba310a9956bf0.exe
Size

268KB
MD5

8e1fad1ef623f41c792ba310a9956bf0
SHA1

9e0995d71a10f5e1d997cce8aa96d1c20d43c805
SHA256

99b2e5d0e83ef289bac19c9627c7365d51015428301270b7aeb140752072704c
SHA512

981bc3a20510f5225743f16aa8a90d10a29829e5b0f68d001fee2751de77a0c368d8d342559f6efc381a9bd62ab7fc808e8f6cdf5165977371235ecd1ea60134
SSDEEP

3072:w8RinudiP52xx67lLdh+iH8SMFR8n5j8Y:1kgiPA6RO3FFR6j

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
3348	632	WerFault.exe	82
1892	632	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\NEAS.8e1fad1ef623f41c792ba310a9956bf0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.8e1fad1ef623f41c792ba310a9956bf0.exe"
1⤵
PID:632
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 632 -s 220
  2⤵
  - Program crash
  PID:3348
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 632 -s 268
  2⤵
  - Program crash
  PID:1892

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 632 -ip 632
1⤵
PID:2840

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 632 -ip 632
1⤵
PID:2328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/632-0-0x0000000000400000-0x0000000000443000-memory.dmp

Filesize
268KB

Download