Analysis

  • max time kernel
    140s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/11/2023, 07:56

General

  • Target

    NEAS.eb82b4b001e592deffb88726166de76f643e3d10ecc1ffbfa1ab289aa2fbe90b.exe

  • Size

    1.0MB

  • MD5

    ea346eade6343dcf2b0a37e8fa7ec9cd

  • SHA1

    a599668eab63cc886014204dd38021785c2675d1

  • SHA256

    eb82b4b001e592deffb88726166de76f643e3d10ecc1ffbfa1ab289aa2fbe90b

  • SHA512

    054cc805e0903b410e1b67b41073aa4c74084b7c52559998760f076bc3d6390a9cecffb39204374db471eb03417f914b505fa050c69ac62ca052c33e5bf38abc

  • SSDEEP

    24576:ofdWTzFpXnVH1BS958zRP/e4tIUkeNM5vbuJDGfSw:mdyFp3DBG58p6jBb

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.eb82b4b001e592deffb88726166de76f643e3d10ecc1ffbfa1ab289aa2fbe90b.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.eb82b4b001e592deffb88726166de76f643e3d10ecc1ffbfa1ab289aa2fbe90b.exe"
    1⤵
      PID:4792
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4792 -s 228
        2⤵
        • Program crash
        PID:4588
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 356 -p 4792 -ip 4792
      1⤵
        PID:4828

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads