Analysis
- max time kernel
139s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20231023-en - resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system - submitted
05/11/2023, 16:32
Behavioral task
behavioral1
Sample
NEAS.52392b74b7d019f70a12512ae5e7c020_JC.exe
Resource
win7-20231020-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.52392b74b7d019f70a12512ae5e7c020_JC.exe
Resource
win10v2004-20231023-en
1 signatures
150 seconds
General
- Target NEAS.52392b74b7d019f70a12512ae5e7c020_JC.exe
- Size 56KB
- Sample231105-t2e5dsag34
- SHA256 55c0fb94949871778accabdad8c7f1134c2cd8ae30190511b07456cd5f186536
- MD5 52392b74b7d019f70a12512ae5e7c020
- SHA1 3ae8330b204dcbbb8d24368d8b0842154f1f3432
- SHA512 f3da10185743e6fa261a145e480d7656e0dc5239f8a8e2349c4448a8d4337f938a37bde82b0683df4ecaf928ed15a7e8cf43f4d7225ca2c14fd3612e6e0ff628
- SSDEEP 384:dnyaz2ypQY5ZkVuqvhyY3Q6oVxY9mQYwyf4o/m7rCwsky3rRNx/:gnHY5Zko4hyYtoVxYFAkkRNx
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4696 1232 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.52392b74b7d019f70a12512ae5e7c020_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.52392b74b7d019f70a12512ae5e7c020_JC.exe"1⤵PID:1232
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1232 -s 2202⤵
- Program crash
PID:4696
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1232 -ip 12321⤵PID:3392