7bef92a82cfce9bcd36617a6b283ea847bbb9402396351ef77d3d1dab13156e1

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
11-11-2023 05:19

Target

NEAS.58f331d88fe8114dfb7457aee42e9310.exe
Size

248KB
MD5

58f331d88fe8114dfb7457aee42e9310
SHA1

3df59915c6bd5970ac7532e4054a69cfe36c71f4
SHA256

7bef92a82cfce9bcd36617a6b283ea847bbb9402396351ef77d3d1dab13156e1
SHA512

4c42710554df329df278e1362b0da5512fb7da8319558aa9b818b421dc7881f500c3a1e72952d4a7d7370b8f62f40f4e08062568447a3785c278d4139cf20d90
SSDEEP

1536:PiMFtsfN+KgHGGj0dZZKUL6cZBRC1VoNcZwT5YMkhohe:JYnQL0dZZp6oRuo2ZSU3

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2156	2148	WerFault.exe	18

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2148 wrote to memory of 2156	2148	NEAS.58f331d88fe8114dfb7457aee42e9310.exe	28
PID 2148 wrote to memory of 2156	2148	NEAS.58f331d88fe8114dfb7457aee42e9310.exe	28
PID 2148 wrote to memory of 2156	2148	NEAS.58f331d88fe8114dfb7457aee42e9310.exe	28
PID 2148 wrote to memory of 2156	2148	NEAS.58f331d88fe8114dfb7457aee42e9310.exe	28

C:\Users\Admin\AppData\Local\Temp\NEAS.58f331d88fe8114dfb7457aee42e9310.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.58f331d88fe8114dfb7457aee42e9310.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2148
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2148 -s 36
  2⤵
  - Program crash
  PID:2156

memory/2148-0-0x0000000000400000-0x000000000043E000-memory.dmp

Filesize
248KB

Download