8a5cd3aaf1e871f4e3b6d70d9a04577006b235982c3a22fb24ac97066f577401 | Triage

Analysis

max time kernel
141s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
03/11/2023, 10:19

Sharing

Report Analysis Logs

General

Target

NEAS.885d1e9784b4c8405e63938648a24e00.exe
Size

14KB
MD5

885d1e9784b4c8405e63938648a24e00
SHA1

1ce444b055645e149578c9e12b579d33137b9bc9
SHA256

8a5cd3aaf1e871f4e3b6d70d9a04577006b235982c3a22fb24ac97066f577401
SHA512

19f8d0e1c980722b7895e6120fd4dfe3045e506a64f2275c98285916f671a4b52ebb60912a90d0d206c540ee65d085301d551bd53a8811c4107991e714065174
SSDEEP

384:E2gL3XOpcAgAgAgAgAgAgI371K/ADE045H:EX7Olnnnnnt3ZK/aA

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4836	1860	WerFault.exe	85

C:\Users\Admin\AppData\Local\Temp\NEAS.885d1e9784b4c8405e63938648a24e00.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.885d1e9784b4c8405e63938648a24e00.exe"
1⤵
PID:1860
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1860 -s 216
  2⤵
  - Program crash
  PID:4836

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1860 -ip 1860
1⤵
PID:2712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1860-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download