525fa43cc91159f5fba36f2325310cff7a682736317fd935e808ba4e185e3aca | Triage

Analysis

max time kernel
142s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
07-11-2023 20:59

Sharing

Report Analysis Logs

General

Target

NEAS.866489052e6a06f8aa5940081a813180.exe
Size

256KB
MD5

866489052e6a06f8aa5940081a813180
SHA1

9d9f637d39f430d54610c12e9c9d82a231808eff
SHA256

525fa43cc91159f5fba36f2325310cff7a682736317fd935e808ba4e185e3aca
SHA512

1b91be3397145b7223b7afefd76a39473ec0a1fae6fc0b888d28148c260e1f62995ec42cf96147abc7483ecc3122c683dfb90e498a93b9814ac326a0451998a7
SSDEEP

1536:3e2zFtcirXA/lU9IOXAFjxAuS2LBwfi+TjRC/:bFqyazOIxAgBwf1TjY

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
3832	4512	WerFault.exe	85
3768	4512	WerFault.exe	85

C:\Users\Admin\AppData\Local\Temp\NEAS.866489052e6a06f8aa5940081a813180.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.866489052e6a06f8aa5940081a813180.exe"
1⤵
PID:4512
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4512 -s 220
  2⤵
  - Program crash
  PID:3832
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4512 -s 224
  2⤵
  - Program crash
  PID:3768

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4512 -ip 4512
1⤵
PID:4480

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4512 -ip 4512
1⤵
PID:4736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4512-0-0x0000000000400000-0x0000000000440000-memory.dmp

Filesize
256KB

Download