Analysis
-
max time kernel
134s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
02/11/2023, 12:08
Behavioral task
behavioral1
Sample
NEAS.45f9d6aeb4c4850c3c8b1a949b768ef0.exe
Resource
win7-20231025-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.45f9d6aeb4c4850c3c8b1a949b768ef0.exe
Resource
win10v2004-20231020-en
1 signatures
150 seconds
General
-
Target
NEAS.45f9d6aeb4c4850c3c8b1a949b768ef0.exe
-
Size
176KB
-
MD5
45f9d6aeb4c4850c3c8b1a949b768ef0
-
SHA1
ee8bff6e72f0d6df17829a92a4c6d6f4caf810ed
-
SHA256
4b4bf3ff02cd40f241ae71aaa2fe05b9b6508ad0200aafc978347ac198f66b81
-
SHA512
4b1ffbf9a62e67f59cabb9a9a16ee5f09b7519e8fcd843d98bc283f0dd0e4cd24d416521ee33086bc13d169864dae5d55f4d4f40f4bde4f58599270a943fe25c
-
SSDEEP
3072:dt5SKzF0Lh9a7IGW9GHeOFVvc3rWGKSG:fUSRAGH/7vc3rWGKS
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 432 3256 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.45f9d6aeb4c4850c3c8b1a949b768ef0.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.45f9d6aeb4c4850c3c8b1a949b768ef0.exe"1⤵PID:3256
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3256 -s 2162⤵
- Program crash
PID:432
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3256 -ip 32561⤵PID:2572