Overview

overview

10

Static

static

10

NEAS.bf407...30.exe

windows7-x64

3

NEAS.bf407...30.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    139s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/11/2023, 07:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.bf407d86b8b23a31c194ec70e9465230.exe

  • Size

    272KB

  • MD5

    bf407d86b8b23a31c194ec70e9465230

  • SHA1

    1d311237dfb4a90a5cd9950e6c1eac0fa9b2fcf8

  • SHA256

    21a6a5db874cc8f4e54f1aaff6823681006ec47f26988ae836fbf0ab7d7abbba

  • SHA512

    78c4de71af8a24952e9310d3fb017cafd9b3ded2f6bd1a8b6947cfe28545505cd5a437a7cb94c67b56a895f8278d3157dc377267d120a3e904be39c085db7cda

  • SSDEEP

    3072:NM70hcq0dl5ENZjYIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIDIIU+IIoIIIIIIIV:NthcqFj7raYOzL

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.bf407d86b8b23a31c194ec70e9465230.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.bf407d86b8b23a31c194ec70e9465230.exe"
    1⤵
      PID:4856
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4856 -s 224
        2⤵
        • Program crash
        PID:4560
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4856 -s 232
        2⤵
        • Program crash
        PID:1252
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4856 -ip 4856
      1⤵
        PID:2264
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 4856 -ip 4856
        1⤵
          PID:2132

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/4856-0-0x0000000000400000-0x0000000000444000-memory.dmp

                Filesize

                272KB

                Download