e692ee2faa76a959d4767da71427732f18d4cebaeabf76eaf22508873da093e2 | Triage

Analysis

max time kernel
138s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
12-11-2023 09:27

Sharing

Report Analysis Logs

General

Target

NEAS.5df361ea0e1fe8826ceba4961ea47040.exe
Size

4.6MB
MD5

5df361ea0e1fe8826ceba4961ea47040
SHA1

7c1d2e734836ca5aa411deb2900af58450d6957e
SHA256

e692ee2faa76a959d4767da71427732f18d4cebaeabf76eaf22508873da093e2
SHA512

ac78e5599d2b1be8b5e9ef59f682da81aa8c8276ca74c60d2ed814e126256b66531318d9d2a1b5bb791294506c2f081fcfee0ec07ede7dd8f05db0683572a4e4
SSDEEP

6144:cxpeYbn9DI4gCAtAyou2lLz9ruF5Ic99EEwi:edz9UMAtc7lndIN99jwi

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1684	3972	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\NEAS.5df361ea0e1fe8826ceba4961ea47040.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.5df361ea0e1fe8826ceba4961ea47040.exe"
1⤵
PID:3972
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3972 -s 520
  2⤵
  - Program crash
  PID:1684

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3972 -ip 3972
1⤵
PID:3444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads