Analysis
-
max time kernel
143s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
31-10-2023 08:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.a18b8e4a387addfdcc807044be198620.exe
Resource
win7-20231020-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.a18b8e4a387addfdcc807044be198620.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
NEAS.a18b8e4a387addfdcc807044be198620.exe
-
Size
14KB
-
MD5
a18b8e4a387addfdcc807044be198620
-
SHA1
3cc1ff5dced0e0b12f5601f56dad274d1e21f8ba
-
SHA256
d976cd99149dc9384ca3c45de083678256a1dd50584e87cda610776b07d92888
-
SHA512
9103c5f8efd56ef97b303ffb90dc2e38d4262caac04a6fe71a9c1a3ba9bcfc1b27e61d7db9dbaabc13399cfdc871f05d305fa5d469184dd64d374f57e1ec8ebc
-
SSDEEP
384:RAGM4QiMBj7MwoLLLLLqhL1w6NH3DE045H:RF+iigLLLLLSRFNHTA
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 968 756 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.a18b8e4a387addfdcc807044be198620.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.a18b8e4a387addfdcc807044be198620.exe"1⤵PID:756
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 756 -s 2162⤵
- Program crash
PID:968
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 756 -ip 7561⤵PID:2232