Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
06/11/2023, 21:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.c7b5c08bb8b4028ce1e1a11289975ab0.exe
Resource
win7-20231020-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.c7b5c08bb8b4028ce1e1a11289975ab0.exe
Resource
win10v2004-20231023-en
1 signatures
150 seconds
General
-
Target
NEAS.c7b5c08bb8b4028ce1e1a11289975ab0.exe
-
Size
14KB
-
MD5
c7b5c08bb8b4028ce1e1a11289975ab0
-
SHA1
6e940de5421fa6aee9b1fd4cd3d24308605c2301
-
SHA256
b7baeebad894a7c4297724afd31e63c6fcd30c98a06e3f23626360be8e266ada
-
SHA512
2618bc0a9587d278845467c13070ebd360baa3198c335c3a599b97822e3878918256f48867b866a6f0ea34ffa866ccb4c1515454bee60128d9275feeeb21b823
-
SSDEEP
192:rO1qhHPX1gYv+L9aFXHvXHvXHvXHvXHvXHC2b2b2b2b2b2oCny2bJfDMqDE045HQ:8qpPlUefffffigggggcny2h/DE045H
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4996 2988 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.c7b5c08bb8b4028ce1e1a11289975ab0.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.c7b5c08bb8b4028ce1e1a11289975ab0.exe"1⤵PID:2988
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2988 -s 2402⤵
- Program crash
PID:4996
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2988 -ip 29881⤵PID:4592