Analysis
-
max time kernel
139s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
02-11-2023 08:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.755e63dd15cd7a862af809f413b225c0.exe
Resource
win7-20231020-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.755e63dd15cd7a862af809f413b225c0.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
NEAS.755e63dd15cd7a862af809f413b225c0.exe
-
Size
208KB
-
MD5
755e63dd15cd7a862af809f413b225c0
-
SHA1
f83a266f90343afe3a09d3fb14cf74ca4cfa2668
-
SHA256
13e0b5e802173e452fd4e8dda521aaf409d62a06654c706e1fe3b96ef6b985ad
-
SHA512
c704da4e883fbe08cac9186e6042b92570c6a255d540f0134ced94f6db58ca19e4aa91d135a246ede1bdb58c31ca7209238b3a3c137558f45bfb263f1c3d722c
-
SSDEEP
1536:LzSRh0/+Vxm+YhDaV0n4b4iEFNBEcDU4IRQqR:LmRhO+VE+mDU04bLEFNBEcg4Ieq
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3500 1896 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.755e63dd15cd7a862af809f413b225c0.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.755e63dd15cd7a862af809f413b225c0.exe"1⤵PID:1896
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1896 -s 2282⤵
- Program crash
PID:3500
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1896 -ip 18961⤵PID:1216