79d887476ea0107921a40cfa33cc5882a5573a4b7d1f42210da918446f1c7cda | Triage

Analysis

max time kernel
140s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
22-10-2023 17:18

Sharing

Report Analysis Logs

General

Target

NEAS.466881e8db9c682fdda3ea8276e688f0.exe
Size

118KB
MD5

466881e8db9c682fdda3ea8276e688f0
SHA1

d662edb17e4677e136ff301f7b464f844b999f86
SHA256

79d887476ea0107921a40cfa33cc5882a5573a4b7d1f42210da918446f1c7cda
SHA512

3acf640f45582479901ab096c648667e9ea218ff1b60d52323e83a22dacba1f44125b97edfe495a83c3a71c9e4b864921a0f7e2c24d698112261eaebdb6a3ddd
SSDEEP

3072:/YgJesfikWyxyvZcMO/6T4nIB5BwZUGCy:t5f9TAZcR/6TkINgUF

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2468	1004	WerFault.exe	67

C:\Users\Admin\AppData\Local\Temp\NEAS.466881e8db9c682fdda3ea8276e688f0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.466881e8db9c682fdda3ea8276e688f0.exe"
1⤵
PID:1004
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1004 -s 356
  2⤵
  - Program crash
  PID:2468

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1004 -ip 1004
1⤵
PID:2852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1004-0-0x0000000001000000-0x0000000001020000-memory.dmp

Filesize
128KB

Download
memory/1004-1-0x0000000001000000-0x0000000001020000-memory.dmp

Filesize
128KB

Download