Analysis
-
max time kernel
123s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
01/11/2023, 00:11
Behavioral task
behavioral1
Sample
NEAS.363d1124ab2a5749b57c9d85ca790f70.exe
Resource
win7-20231020-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.363d1124ab2a5749b57c9d85ca790f70.exe
Resource
win10v2004-20231023-en
1 signatures
150 seconds
General
-
Target
NEAS.363d1124ab2a5749b57c9d85ca790f70.exe
-
Size
120KB
-
MD5
363d1124ab2a5749b57c9d85ca790f70
-
SHA1
16df06944064307e99ef6f6c8cfbb2f87e52346c
-
SHA256
a8efefe20449b434624b207f3eefaa028a51621352c7011b9241cb44b87990cb
-
SHA512
e008b657576c86cb3e9100ec85b149120de7f3da84aa75d472cb5566d7227a2dd6315c03a628cec7bb94110bdfc830de124c76e68dd007f179af975a8552d153
-
SSDEEP
3072:DjzhZWxivgmhbI/pqqsFUCN3R96PI+WpgvyDFe:DXC4vgmhbIxs3NBxpuyDM
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 884 4324 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.363d1124ab2a5749b57c9d85ca790f70.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.363d1124ab2a5749b57c9d85ca790f70.exe"1⤵PID:4324
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4324 -s 2162⤵
- Program crash
PID:884
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4324 -ip 43241⤵PID:1008