efe88bbefab5c337afd739512f320e59ef990e1df20e41b26fb97d46f689d5a9

Analysis

max time kernel
140s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
31/10/2023, 08:38

Target

NEAS.178cd7746e4d02e6511e699b4404b920.exe
Size

304KB
MD5

178cd7746e4d02e6511e699b4404b920
SHA1

364a9c6c963d74abb7aaebb3ba8c66a89ba21226
SHA256

efe88bbefab5c337afd739512f320e59ef990e1df20e41b26fb97d46f689d5a9
SHA512

959cbb9648a249396e8ba2c12c9e36e83038d49f420325865c3b6d23dbeb29fbf4994fc817aa46b0bdca442aacd5da890d20117723b14f8752b7b2301cdfb28b
SSDEEP

3072:ZIDNcIFN3tw4QfwmAOMe6UJbVM/vkA9OQzY6eCFs5Juh2v19hlDcfbEdp7uxEo+i:qJigOTJXYOaFs5Juh819hqkuGh2LeyI

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2260	3316	WerFault.exe	87

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3316	NEAS.178cd7746e4d02e6511e699b4404b920.exe

C:\Users\Admin\AppData\Local\Temp\NEAS.178cd7746e4d02e6511e699b4404b920.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.178cd7746e4d02e6511e699b4404b920.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3316
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3316 -s 468
  2⤵
  - Program crash
  PID:2260

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3316 -ip 3316
1⤵
PID:3716

memory/3316-3-0x0000000002350000-0x0000000002351000-memory.dmp

Filesize
4KB

Download
memory/3316-2-0x0000000002300000-0x0000000002301000-memory.dmp

Filesize
4KB

Download