Analysis
-
max time kernel
86s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
31/10/2023, 08:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.9a526ac1a95acf2beca285a6d6507030.exe
Resource
win7-20231023-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.9a526ac1a95acf2beca285a6d6507030.exe
Resource
win10v2004-20231020-en
1 signatures
150 seconds
General
-
Target
NEAS.9a526ac1a95acf2beca285a6d6507030.exe
-
Size
188KB
-
MD5
9a526ac1a95acf2beca285a6d6507030
-
SHA1
e97661c8db89d7c5c7ec4126b3f2a9f236c3b7e2
-
SHA256
f42e8f79eb9618a11b08a97c25192fa03c2b5b1d8ead38721a2df1f80f93a572
-
SHA512
da3dfa81372723efbb8f21dcb6bf789294ced20a8e2b84f5a47717e44a4241f94c87a15e9cb230579756247e750b69455c3d914844e332a13b1f0e56f1799ff0
-
SSDEEP
768:YCYyUzGRUSSnhvORRoQGWSlnvAC1JEJiPNxJCbG82PhMUc/1H5:YCY3GBSnFOb0hxAYEJmxJCa8shMUS
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2044 1448 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.9a526ac1a95acf2beca285a6d6507030.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.9a526ac1a95acf2beca285a6d6507030.exe"1⤵PID:1448
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1448 -s 2242⤵
- Program crash
PID:2044
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1448 -ip 14481⤵PID:1608