5138a8cffe9b687233429ac0bd5c37db0015ba2da9f8541945ba3b55b49c96dc

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
11-11-2023 12:50

Target

NEAS.b91980b490cae7aabe06a44284002540.exe
Size

224KB
MD5

b91980b490cae7aabe06a44284002540
SHA1

66a648e7c2af684730e7b366c8f2c0dffc6cb718
SHA256

5138a8cffe9b687233429ac0bd5c37db0015ba2da9f8541945ba3b55b49c96dc
SHA512

678c3fa99b76ae11cc8c52d235962ff36f4ec07757baf1f892362104c4d2f1af8cb0a1bdcd66fc6ee94e01c5ff539dc29a92cd8751559f5ad9e0513e81cdd08a
SSDEEP

768:fEA+elap4nNM8+R6N5HzHa86fsWC/DrMB28C/1H5o9mrUTvn93b7NRDMFME3eUg:f7+eltm8Y6jHO86s/DOpI+IEn9rjDH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1740	2104	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2104 wrote to memory of 1740	2104	NEAS.b91980b490cae7aabe06a44284002540.exe	28
PID 2104 wrote to memory of 1740	2104	NEAS.b91980b490cae7aabe06a44284002540.exe	28
PID 2104 wrote to memory of 1740	2104	NEAS.b91980b490cae7aabe06a44284002540.exe	28
PID 2104 wrote to memory of 1740	2104	NEAS.b91980b490cae7aabe06a44284002540.exe	28

C:\Users\Admin\AppData\Local\Temp\NEAS.b91980b490cae7aabe06a44284002540.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.b91980b490cae7aabe06a44284002540.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2104
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2104 -s 36
  2⤵
  - Program crash
  PID:1740

memory/2104-0-0x0000000000400000-0x0000000000438000-memory.dmp

Filesize
224KB

Download