b2dd2a709b19f071b3a12fba01ddba9319964ed7c64d6f99a8f354fcb6110ea7

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
28/10/2023, 20:13

Target

NEAS.c50ae0662bc38d22b3cb5e9ec85f21a0.exe
Size

5KB
MD5

c50ae0662bc38d22b3cb5e9ec85f21a0
SHA1

bb0a5d941a6a974e1f5b67fc670339f12bd45547
SHA256

b2dd2a709b19f071b3a12fba01ddba9319964ed7c64d6f99a8f354fcb6110ea7
SHA512

342e7a30d1290d95898aa2d39e97fac4aa83c2c123d18529b3b18fda2b212864ebbbc46dbc09bb1d2d80370df3eabbde46b5871886a77a5840a38883fd6df0d6
SSDEEP

48:SSlXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7t0RuqSxp:TWLkFfNnOKYloIQ2pm2pbYSIxE

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2944	2216	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2216 wrote to memory of 2944	2216	NEAS.c50ae0662bc38d22b3cb5e9ec85f21a0.exe	28
PID 2216 wrote to memory of 2944	2216	NEAS.c50ae0662bc38d22b3cb5e9ec85f21a0.exe	28
PID 2216 wrote to memory of 2944	2216	NEAS.c50ae0662bc38d22b3cb5e9ec85f21a0.exe	28
PID 2216 wrote to memory of 2944	2216	NEAS.c50ae0662bc38d22b3cb5e9ec85f21a0.exe	28

C:\Users\Admin\AppData\Local\Temp\NEAS.c50ae0662bc38d22b3cb5e9ec85f21a0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.c50ae0662bc38d22b3cb5e9ec85f21a0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2216
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2216 -s 48
  2⤵
  - Program crash
  PID:2944