f63ceb7c03f7024f1420b45365d152a63e60eb8feff3a8e9551c392a8f8dbc4a

Analysis

max time kernel
119s
max time network
141s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
31/10/2023, 08:57

Target

NEAS.b732b651b67bb64f746ff93410572910.exe
Size

268KB
MD5

b732b651b67bb64f746ff93410572910
SHA1

5afd05f86ed5e6ca64e67782e292a6e322248758
SHA256

f63ceb7c03f7024f1420b45365d152a63e60eb8feff3a8e9551c392a8f8dbc4a
SHA512

7a137adfc1068cbe678826ba5e5f40743aebe8f14086fc3428e26bac932190ae824023ae78c3ef52e7a1b916442065c836c25c9eea7a768970799ae78c5f2c7b
SSDEEP

1536:hu91gBTtZgQzGEg9/GyeyuyjXq+66DFUABABOVLefE:u6BT3gQzLg9/Gyeyuyj6+JB8M

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1904	2344	WerFault.exe	11

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2344 wrote to memory of 1904	2344	NEAS.b732b651b67bb64f746ff93410572910.exe	28
PID 2344 wrote to memory of 1904	2344	NEAS.b732b651b67bb64f746ff93410572910.exe	28
PID 2344 wrote to memory of 1904	2344	NEAS.b732b651b67bb64f746ff93410572910.exe	28
PID 2344 wrote to memory of 1904	2344	NEAS.b732b651b67bb64f746ff93410572910.exe	28

C:\Users\Admin\AppData\Local\Temp\NEAS.b732b651b67bb64f746ff93410572910.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.b732b651b67bb64f746ff93410572910.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2344
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2344 -s 36
  2⤵
  - Program crash
  PID:1904

memory/2344-0-0x0000000000400000-0x0000000000443000-memory.dmp

Filesize
268KB

Download