Analysis
-
max time kernel
182s -
max time network
211s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
22-10-2023 17:19
Behavioral task
behavioral1
Sample
NEAS.51a4a6a7fc2842e9b1a626211696d7a0.exe
Resource
win7-20231020-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.51a4a6a7fc2842e9b1a626211696d7a0.exe
Resource
win10v2004-20231020-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
NEAS.51a4a6a7fc2842e9b1a626211696d7a0.exe
-
Size
256KB
-
MD5
51a4a6a7fc2842e9b1a626211696d7a0
-
SHA1
120c4ab0d468669e41273f6bcc9d168764b6a397
-
SHA256
8497c95d6e28d6b896156f4256b3f5c87520c22e0e2439bf5aaca81c92e5c479
-
SHA512
0093d990ff5b933bac24edb11e5f4288bae64c16bad92f13d7da99971703114d29beb74ffd160dae43d978cc136c61d6605d9a676201d8c845f6c45f330263a4
-
SSDEEP
1536:VUDRi9T5sJdi9bxHNr2pnx6KaUuP6iuwJRFoOWokiHEctlExkg8F:V8RinudiP52xx67lLdhiiHEctlakgw
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4304 3884 WerFault.exe 27 1764 3884 WerFault.exe 27
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.51a4a6a7fc2842e9b1a626211696d7a0.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.51a4a6a7fc2842e9b1a626211696d7a0.exe"1⤵PID:3884
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3884 -s 2202⤵
- Program crash
PID:4304
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3884 -s 2242⤵
- Program crash
PID:1764
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3884 -ip 38841⤵PID:3288
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3884 -ip 38841⤵PID:3868