ba94dac4000495744e8401978280d1c50269b2a0e306d6ff51ee217cd7342547

Analysis

max time kernel
119s
max time network
126s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
22/10/2023, 17:23

Target

NEAS.8cdbc841f357d4ddf0d344ccd53744f0.exe
Size

28KB
MD5

8cdbc841f357d4ddf0d344ccd53744f0
SHA1

3252e44515b53729898b7863cf7faadad7e11b21
SHA256

ba94dac4000495744e8401978280d1c50269b2a0e306d6ff51ee217cd7342547
SHA512

820097e6e83955d7ab9a40e4b19d53afd1b9f0bf0a2c6801b8a196b6a53321721712a3da6bb447eac30cd3078331d917df610c256caa4923de46436eeb72066c
SSDEEP

192:XpERaPO23v67sWKiLZOYBALaDfhdtg4X0EnwwoiubVtfB:LG23S+QOYBRDfhdtBXywo/bVtfB

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2956	2204	WerFault.exe	14

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 2956	2204	NEAS.8cdbc841f357d4ddf0d344ccd53744f0.exe	28
PID 2204 wrote to memory of 2956	2204	NEAS.8cdbc841f357d4ddf0d344ccd53744f0.exe	28
PID 2204 wrote to memory of 2956	2204	NEAS.8cdbc841f357d4ddf0d344ccd53744f0.exe	28
PID 2204 wrote to memory of 2956	2204	NEAS.8cdbc841f357d4ddf0d344ccd53744f0.exe	28

C:\Users\Admin\AppData\Local\Temp\NEAS.8cdbc841f357d4ddf0d344ccd53744f0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.8cdbc841f357d4ddf0d344ccd53744f0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2204
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2204 -s 36
  2⤵
  - Program crash
  PID:2956