Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231025-en -
resource tags
arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system -
submitted
07/11/2023, 03:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NEAS.604d33f74fdce4819a377a9e74228910.exe
Resource
win7-20231020-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.604d33f74fdce4819a377a9e74228910.exe
Resource
win10v2004-20231025-en
1 signatures
150 seconds
General
-
Target
NEAS.604d33f74fdce4819a377a9e74228910.exe
-
Size
472KB
-
MD5
604d33f74fdce4819a377a9e74228910
-
SHA1
5eac5de96cb9e521b3d12782bf4df5886c87871d
-
SHA256
b694a342709e0c174a278cb2cfca388f9a40fe7be37376a292bd476a8838b60a
-
SHA512
44f9448e12d7edad224eba811cfd7254ad603d13343fdb7fc938bebf182e75ce74d2248940e30d5ebba9af16bc88a8fe34a9c745d9a9fb02c8989df70d1cb6e5
-
SSDEEP
3072:d8RinudiP52xx67lLdFiHDoX2F88jlwq+1BCl8dnNXbgJkdQu:CkgiPA6RnPX2FJjlwq+6kNXwu
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1104 1064 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.604d33f74fdce4819a377a9e74228910.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.604d33f74fdce4819a377a9e74228910.exe"1⤵PID:1064
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1064 -s 2242⤵
- Program crash
PID:1104
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1064 -ip 10641⤵PID:1176