Analysis
-
max time kernel
137s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
01/11/2023, 09:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.0aacc2d95da4dc75042d57670eb453f0_JC.exe
Resource
win7-20231023-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.0aacc2d95da4dc75042d57670eb453f0_JC.exe
Resource
win10v2004-20231023-en
1 signatures
150 seconds
General
-
Target
NEAS.0aacc2d95da4dc75042d57670eb453f0_JC.exe
-
Size
268KB
-
MD5
0aacc2d95da4dc75042d57670eb453f0
-
SHA1
4c4c2e28cecb73fba444b0e2f87f44e3935bde2a
-
SHA256
5564553309a9eda7cb6c8f7d2b0c04ad10cc67641d2216e58dac494449a91f54
-
SHA512
7463a2473c73fb08e04f2ca69359a8519daa5bc6f610d88ff1ce46103ecd2e91ea31ba7cc059568db27b5c887cd23f29171dc317081e19dfc858f8f52cc88ee5
-
SSDEEP
3072:gC6xRyfFP0o35cc+rpLOxzVw0v0wnJcefSXQHPTTAkvB5Dd:gC6xRydsS+J+ntnJfKXqPTX7D
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4224 4108 WerFault.exe 85 1556 4108 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.0aacc2d95da4dc75042d57670eb453f0_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.0aacc2d95da4dc75042d57670eb453f0_JC.exe"1⤵PID:4108
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4108 -s 2202⤵
- Program crash
PID:4224
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4108 -s 2242⤵
- Program crash
PID:1556
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4108 -ip 41081⤵PID:4112
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4108 -ip 41081⤵PID:5096