Analysis
-
max time kernel
138s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
02-11-2023 15:31
General
-
Target
NEAS.66355f2ef59517cf6d3e8948ec60c140_JC.exe
-
Size
442KB
-
MD5
66355f2ef59517cf6d3e8948ec60c140
-
SHA1
4ffc9c0ce9c06121cd4a727e0d31d8bd9dd28dbb
-
SHA256
fa4a988ca1c69e3dcd3069d5262021406b0320e33cd3191d0fa0df7377106e62
-
SHA512
87a8a8a073bf18e95ce7233558e017919131225bc79a96e9bd2f0ed64d6ad89c7984bfdc6b89bf95675e680863d8bf64685ee5c89b8e1cc7fdebe9393d357c47
-
SSDEEP
12288:E463EnmKukmbCTyXvZf1VWLVWEmBfDpYnmqukEp1f:bMEnm2yXR2m19YnmxZ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.66355f2ef59517cf6d3e8948ec60c140_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.66355f2ef59517cf6d3e8948ec60c140_JC.exe"1⤵
- Suspicious behavior: RenamesItself
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4696 -s 19562⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4696 -ip 46961⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
512KB
-
Filesize
8KB
-
Filesize
512KB
-
Filesize
8KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
512KB