ef49fc11e8908b7355294ceb620d213525525f96c472eddd1ee1675a6696ec8b

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
02/11/2023, 14:51

Target

NEAS.427660e4b745dd223aac5f95f6423620_JC.exe
Size

204KB
MD5

427660e4b745dd223aac5f95f6423620
SHA1

191f508bab655db46d5d8b05d689171274273c97
SHA256

ef49fc11e8908b7355294ceb620d213525525f96c472eddd1ee1675a6696ec8b
SHA512

a93ebf2b781a9c2df1d1cf00fe1cb8b5fbaa2fb73325049b5a97698483a148768f0b4d6b7d5f03acc404112504864b0096f32fbc98715c0f9b0998bf3981a4ef
SSDEEP

768:9JPEKe0oKaGws6KMP2wzaDEZiCa1/N5BQs/AGQZR4u66666666666666qkDXedU7:91WLNls6NYn/N514D4iKSJ4

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2148	2360	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2360 wrote to memory of 2148	2360	NEAS.427660e4b745dd223aac5f95f6423620_JC.exe	28
PID 2360 wrote to memory of 2148	2360	NEAS.427660e4b745dd223aac5f95f6423620_JC.exe	28
PID 2360 wrote to memory of 2148	2360	NEAS.427660e4b745dd223aac5f95f6423620_JC.exe	28
PID 2360 wrote to memory of 2148	2360	NEAS.427660e4b745dd223aac5f95f6423620_JC.exe	28

C:\Users\Admin\AppData\Local\Temp\NEAS.427660e4b745dd223aac5f95f6423620_JC.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.427660e4b745dd223aac5f95f6423620_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2360
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2360 -s 36
  2⤵
  - Program crash
  PID:2148

memory/2360-0-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download