Analysis
-
max time kernel
123s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20231025-en -
resource tags
arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system -
submitted
06/11/2023, 20:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.3da88bfcde6bc30e68600629396b90d0.exe
Resource
win7-20231020-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.3da88bfcde6bc30e68600629396b90d0.exe
Resource
win10v2004-20231025-en
1 signatures
150 seconds
General
-
Target
NEAS.3da88bfcde6bc30e68600629396b90d0.exe
-
Size
472KB
-
MD5
3da88bfcde6bc30e68600629396b90d0
-
SHA1
1ece3a7774c7c27ad8e0fdc94394d6c84b3c4c6d
-
SHA256
e8815ddaa6f2bcf7de3a75406c316c7cbc2f0717661f887f7b8687dc2181cf91
-
SHA512
9437e0d7b2d06531b11c13d2fb9b273764b0d8613e98fcdee65e10932f6592e023bf92a43c0167bbabc60a27ce24aacd96b68322afa7a162eaafa61111d12eea
-
SSDEEP
3072:3Z8RinudiP52xx67lLdPiHDo1ZvRUSk79jWHpiPOg0vfjFo1F8F:GkgiPA6R5PlUx74UPDKGc
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3184 968 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.3da88bfcde6bc30e68600629396b90d0.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.3da88bfcde6bc30e68600629396b90d0.exe"1⤵PID:968
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 968 -s 2242⤵
- Program crash
PID:3184
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 968 -ip 9681⤵PID:4632