0cb74470f92cd7ffa0eeff4cc4bb5007bf9ef3953dd9d5b3c146963a1e8b328c

Analysis

max time kernel
121s
max time network
127s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
11/11/2023, 06:01

Target

NEAS.ee524dcdd750a4d7acc6b5eff61dd090.exe
Size

212KB
MD5

ee524dcdd750a4d7acc6b5eff61dd090
SHA1

e2b6bd9ae17dbe4915e9ac2ae0cdb6c5b52bb27e
SHA256

0cb74470f92cd7ffa0eeff4cc4bb5007bf9ef3953dd9d5b3c146963a1e8b328c
SHA512

88b67275c638339e52ef2118f5c9efc95d2b7f7f2c4ec1a4693d985997a29393287225c72af09465fc2e403ca2e8dede9b0b797a5bfcf08a12eceb40570f0fb3
SSDEEP

1536:13apwXo6snSI7+4TfjBskSx8x35ncc+rpPJrpHFkxwOUR1iDRcR:hC6xRyfFP0o35cc+rp3OUzeW

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2060	2248	WerFault.exe	16

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2248 wrote to memory of 2060	2248	NEAS.ee524dcdd750a4d7acc6b5eff61dd090.exe	17
PID 2248 wrote to memory of 2060	2248	NEAS.ee524dcdd750a4d7acc6b5eff61dd090.exe	17
PID 2248 wrote to memory of 2060	2248	NEAS.ee524dcdd750a4d7acc6b5eff61dd090.exe	17
PID 2248 wrote to memory of 2060	2248	NEAS.ee524dcdd750a4d7acc6b5eff61dd090.exe	17

C:\Users\Admin\AppData\Local\Temp\NEAS.ee524dcdd750a4d7acc6b5eff61dd090.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.ee524dcdd750a4d7acc6b5eff61dd090.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2248
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2248 -s 36
  2⤵
  - Program crash
  PID:2060

memory/2248-0-0x0000000000400000-0x0000000000435000-memory.dmp

Filesize
212KB

Download