Analysis
-
max time kernel
140s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
06-11-2023 00:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.2ad3e9c275ab9bd2e7d32be411126360.exe
Resource
win7-20231025-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.2ad3e9c275ab9bd2e7d32be411126360.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
NEAS.2ad3e9c275ab9bd2e7d32be411126360.exe
-
Size
14KB
-
MD5
2ad3e9c275ab9bd2e7d32be411126360
-
SHA1
4d72d33cc264464547ae65e2e408fad0814362ae
-
SHA256
bcdc8291735b926df664d44d875b4227492aabcfad82077827f63ba6fcf15658
-
SHA512
583305ae2103a74338ebf1f5927db4c6764cdd8c81cc55376f322297453160f3a7eedf210a01ccbde8b6096cb82db223a91363e18a9adf74a140ab146ae7a523
-
SSDEEP
192:MC5JV8I8QJ+7J29l5kl0QQQQQQQQQQQQQQxL5o9/mR8dLeHp3qDE045HQ:olJ2NkW5RR8BeJaDE045H
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4624 3264 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.2ad3e9c275ab9bd2e7d32be411126360.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.2ad3e9c275ab9bd2e7d32be411126360.exe"1⤵PID:3264
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3264 -s 2162⤵
- Program crash
PID:4624
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 3264 -ip 32641⤵PID:4228