Analysis
-
max time kernel
140s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231025-en -
resource tags
arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system -
submitted
15/11/2023, 05:45
Behavioral task
behavioral1
Sample
NEAS.c636665812854425776458ff252b5900.exe
Resource
win7-20231020-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NEAS.c636665812854425776458ff252b5900.exe
Resource
win10v2004-20231025-en
1 signatures
150 seconds
General
-
Target
NEAS.c636665812854425776458ff252b5900.exe
-
Size
256KB
-
MD5
c636665812854425776458ff252b5900
-
SHA1
b5fe054b169474783f6581779109ae66924873e8
-
SHA256
e623069978f21b31d7927978f8b8b1644ec62c3802b027be63808ea88f4df740
-
SHA512
7092edc0c9c3d74a17e4b53b69268e3d484c97ccdf9feaf8a9dd1ec3c8001cefb2656cc41b623a15a9ae401abfaea9ced69246219366cc64c3d0e4365c02313e
-
SSDEEP
1536:h7pNeATl70HJeVYPGFQ2PUQ5ziJE93isirBUBEVG:FeQCeVYPGFQ2P3N93bsG
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 3344 1344 WerFault.exe 85 2240 1344 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.c636665812854425776458ff252b5900.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.c636665812854425776458ff252b5900.exe"1⤵PID:1344
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1344 -s 2202⤵
- Program crash
PID:3344
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1344 -s 2242⤵
- Program crash
PID:2240
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1344 -ip 13441⤵PID:852
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 1344 -ip 13441⤵PID:2520