801b571c3367feae5e541e8f23bfe409bb67e4b64cf4ca130580605b60acc66f | Triage

Analysis

max time kernel
122s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
14/11/2023, 23:52

Sharing

Report Analysis Logs

General

Target

NEAS.92e2103a115a8ea73532227eaf359350.exe
Size

268KB
MD5

92e2103a115a8ea73532227eaf359350
SHA1

730007f5826b8b045962eb9ff1a9960f9fab424a
SHA256

801b571c3367feae5e541e8f23bfe409bb67e4b64cf4ca130580605b60acc66f
SHA512

44765614eb443b0eed8e398a08e5f349e98e30dfdcf7ba1c3ba45eb2670ce70002159c5dc14b4f7efbd874e2f728be93ea8024195e052df73c86761f6f077830
SSDEEP

3072:38RinudiP52xx67lLdhCiHeXp4PmebD5Vo:skgiPA6RShZoHbD5W

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

pid	pid_target	Process	procid_target
2492	4344	WerFault.exe	85
4936	4344	WerFault.exe	85

C:\Users\Admin\AppData\Local\Temp\NEAS.92e2103a115a8ea73532227eaf359350.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.92e2103a115a8ea73532227eaf359350.exe"
1⤵
PID:4344
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4344 -s 220
  2⤵
  - Program crash
  PID:2492
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4344 -s 224
  2⤵
  - Program crash
  PID:4936

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4344 -ip 4344
1⤵
PID:1416

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4344 -ip 4344
1⤵
PID:1844

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4344-0-0x0000000000400000-0x0000000000443000-memory.dmp

Filesize
268KB

Download