38fa7dae3d9d188271097863e1e859cfb03a94756b392e22aee2e505e32d4992 | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
02-11-2023 13:27

Sharing

Report Analysis Logs

General

Target

NEAS.2a0d77c839116c761284290ce6980a50_JC.exe
Size

76KB
MD5

2a0d77c839116c761284290ce6980a50
SHA1

07f7a88fe4aa91481e73fb89d691d8d6107db49e
SHA256

38fa7dae3d9d188271097863e1e859cfb03a94756b392e22aee2e505e32d4992
SHA512

9b8ec3f7d2118ca05b5110af3961588b802338e5bfc16df08f66e0a5dfc564d693f30dd7a35d4a869ea1069c5c7584058a3616be090147f552ab9f1e1b54b6bf
SSDEEP

1536:EhEaiKXyNv/HbasftuWsy1q0ACQ8QHBLhc7SrNy:ytXoH7a/hXrN

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1788	2116	WerFault.exe	27

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2116	NEAS.2a0d77c839116c761284290ce6980a50_JC.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2116 wrote to memory of 1788	2116	NEAS.2a0d77c839116c761284290ce6980a50_JC.exe	28
PID 2116 wrote to memory of 1788	2116	NEAS.2a0d77c839116c761284290ce6980a50_JC.exe	28
PID 2116 wrote to memory of 1788	2116	NEAS.2a0d77c839116c761284290ce6980a50_JC.exe	28
PID 2116 wrote to memory of 1788	2116	NEAS.2a0d77c839116c761284290ce6980a50_JC.exe	28

C:\Users\Admin\AppData\Local\Temp\NEAS.2a0d77c839116c761284290ce6980a50_JC.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.2a0d77c839116c761284290ce6980a50_JC.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2116
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2116 -s 188
  2⤵
  - Program crash
  PID:1788

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2116-0-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download
memory/2116-2-0x0000000000400000-0x0000000000413000-memory.dmp

Filesize
76KB

Download