Analysis

  • max time kernel
    113s
  • max time network
    183s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-11-2023 20:58

General

  • Target

    NEAS.9c0d2683513f9c2df0846cd61da923b0.exe

  • Size

    14KB

  • MD5

    9c0d2683513f9c2df0846cd61da923b0

  • SHA1

    983c923e7453d039e94275b652423eb24ea93af7

  • SHA256

    b81f3b4b4b3d94a0402362054d9396d9fa76a8f3486f2c6371ae06fe10f64c7d

  • SHA512

    55220a50661f82fdf4311dda685247ef977023a2d0481b94ce521524596c79db2b4b8a42e3bb6fe244fc871b8ec080295288351ea2d1780044102664e3e896c0

  • SSDEEP

    192:ds6lxn1y2ZSs/r65osAIZO+G9+pQNe5C/iP+BMzGGuMHHmJuflQuUFU0KfvEjDtk:akPreiMF6QegGGDmJ8liFUDE045H

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.9c0d2683513f9c2df0846cd61da923b0.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.9c0d2683513f9c2df0846cd61da923b0.exe"
    1⤵
      PID:1364
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1364 -s 212
        2⤵
        • Program crash
        PID:4636
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 1364 -ip 1364
      1⤵
        PID:4936

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1364-0-0x0000000000400000-0x000000000040A000-memory.dmp

        Filesize

        40KB