Analysis
-
max time kernel
200s -
max time network
230s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
03-11-2023 08:43
Behavioral task
behavioral1
Sample
NEAS.9bc06709260dc5254a90027a6d74a8f0.exe
Resource
win7-20231023-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.9bc06709260dc5254a90027a6d74a8f0.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
NEAS.9bc06709260dc5254a90027a6d74a8f0.exe
-
Size
205KB
-
MD5
9bc06709260dc5254a90027a6d74a8f0
-
SHA1
acb03b43863410934e3011c8eeea2a5b5e1edf65
-
SHA256
bd51f0ac101156f89a4e5eb5a6ad8f1cfb02356105187f971cf4756c27d5b10b
-
SHA512
f99c8e4b0ffbc84183a54153967443ec309e272518b738e2ef1774e64ea866ec95de91927c98ecc0993ad82c5cce1a4f29b35bd07ad5bd615d02854756269c61
-
SSDEEP
6144:t6vPAfc8qjPVEw5f7IqfkZqFG8v6ZR0jQlsELGqpXv:t6AaR5f7IqfkGGmElZXv
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2756 4748 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.9bc06709260dc5254a90027a6d74a8f0.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.9bc06709260dc5254a90027a6d74a8f0.exe"1⤵PID:4748
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4748 -s 4482⤵
- Program crash
PID:2756
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4748 -ip 47481⤵PID:2080