88a07b46bd2ec98ca7ce694946b1e1b96fa69c8ea6251b8e23362590bc910564

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
28-10-2023 18:04

Target

NEAS.2b684f6f077f9bd146822a982ad83690.exe
Size

119KB
MD5

2b684f6f077f9bd146822a982ad83690
SHA1

9a2f485b0d9288042ccead8fc5f7c3a02fff38b5
SHA256

88a07b46bd2ec98ca7ce694946b1e1b96fa69c8ea6251b8e23362590bc910564
SHA512

db9ec563a0752dc9833ac75be87c5e4f41d57d0b7687cb172e1902cf08b7098c5e48f3f56a2489b2bab2886902781ec3ab00ff0d3d51f156d92b108c17807376
SSDEEP

1536:pS55rsva9w4xCRM5h4SCwqisBaDpmXsYfyRn7+kiW7BhiDjtHGWFPPEvKQNTxzbs:wfUAHHpqisBOgXcR7+ktBK5mmDQNVzbs

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2780	2540	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2540 wrote to memory of 2780	2540	NEAS.2b684f6f077f9bd146822a982ad83690.exe	28
PID 2540 wrote to memory of 2780	2540	NEAS.2b684f6f077f9bd146822a982ad83690.exe	28
PID 2540 wrote to memory of 2780	2540	NEAS.2b684f6f077f9bd146822a982ad83690.exe	28
PID 2540 wrote to memory of 2780	2540	NEAS.2b684f6f077f9bd146822a982ad83690.exe	28

C:\Users\Admin\AppData\Local\Temp\NEAS.2b684f6f077f9bd146822a982ad83690.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.2b684f6f077f9bd146822a982ad83690.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2540
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2540 -s 36
  2⤵
  - Program crash
  PID:2780

memory/2540-0-0x0000000000400000-0x0000000000435000-memory.dmp

Filesize
212KB

Download
memory/2540-1-0x0000000000400000-0x0000000000435000-memory.dmp

Filesize
212KB

Download