Analysis
- max time kernel
144s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20231020-en - resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system - submitted
02/11/2023, 16:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.ab633e63129617bcc3b51ca351b87770.exe
Resource
win7-20231020-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.ab633e63129617bcc3b51ca351b87770.exe
Resource
win10v2004-20231020-en
1 signatures
150 seconds
General
- Target NEAS.ab633e63129617bcc3b51ca351b87770.exe
- Size 40KB
- Sample231102-va2dzscc43
- SHA256 5e02787a34adab51745bad8f3ad0591650d1cf667a17e79ba73fbfe82cfa8036
- MD5 ab633e63129617bcc3b51ca351b87770
- SHA1 2568de4bc0cc042a49d6be16baf83fb1b8bf450c
- SHA512 8950c6d05165e86c6fc91e243344d421e4cfd11795083070a7c1c1e1557e117d5558ebe1faf55108c6a831a067f6e04364b15941e51d00893c079580dee84639
- SSDEEP 192:F7z4BwPhF/PesmVKlyR5fffffffffffffff+E3wc/AeeCqDE045HQG777Q:lz4Af/Gslq1QDE045HP777Q
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 536 4124 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.ab633e63129617bcc3b51ca351b87770.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.ab633e63129617bcc3b51ca351b87770.exe"1⤵PID:4124
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4124 -s 2162⤵
- Program crash
PID:536
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4124 -ip 41241⤵PID:1616