4f78e5444535b4639a3ca50698c3856e38789b51cffbe591984a2deb739680eb

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
07/11/2023, 04:34

Target

NEAS.231446d9fe29b0ad5151ec8655d167c0.exe
Size

252KB
MD5

231446d9fe29b0ad5151ec8655d167c0
SHA1

097e462dc09f927f6dbbdd32ae5a6e977b96f391
SHA256

4f78e5444535b4639a3ca50698c3856e38789b51cffbe591984a2deb739680eb
SHA512

3ce21d6119846edde4e351cc17db0c50f50d9b8919b603db850836ac5a3c8b5c466f562965bdd1929170a253c711c04853a407729ff00b5b8deb086e7c0b881d
SSDEEP

1536:rUDRi9T5sJdi9bxHNr2pnx6KaUuP6iuwJRF8OWlyiHSnxZRRVkeyyVr3iwcH:r8RinudiP52xx67lLdhRiHS93kremwc

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2196	2176	WerFault.exe	6

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2176 wrote to memory of 2196	2176	NEAS.231446d9fe29b0ad5151ec8655d167c0.exe	28
PID 2176 wrote to memory of 2196	2176	NEAS.231446d9fe29b0ad5151ec8655d167c0.exe	28
PID 2176 wrote to memory of 2196	2176	NEAS.231446d9fe29b0ad5151ec8655d167c0.exe	28
PID 2176 wrote to memory of 2196	2176	NEAS.231446d9fe29b0ad5151ec8655d167c0.exe	28

C:\Users\Admin\AppData\Local\Temp\NEAS.231446d9fe29b0ad5151ec8655d167c0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.231446d9fe29b0ad5151ec8655d167c0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2176
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2176 -s 36
  2⤵
  - Program crash
  PID:2196

memory/2176-0-0x0000000000400000-0x000000000043F000-memory.dmp

Filesize
252KB

Download