Analysis
-
max time kernel
153s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
15/11/2023, 16:36
General
-
Target
NEAS.d363c2dc7eadf1fbfc9bee1983f948677d4495ec13682c6298cfc8647fa47b54.exe
-
Size
1.1MB
-
MD5
c614eeeba2ea73c5d8c99c4b71f7ce30
-
SHA1
f02dba3b0424fac5e7d753ee7770305550802b4b
-
SHA256
d363c2dc7eadf1fbfc9bee1983f948677d4495ec13682c6298cfc8647fa47b54
-
SHA512
40284fc43c5e5a53ba2ab89bf113ab5bd69b4b872bb52a3b9f244487a8d4649a74466bd920b4ed73d8b5297f9b8c401a021c8faf7695330eecaabb418a74403a
-
SSDEEP
24576:F0DATiNHrdQUwAVOjoRRDTfiNjw8HCuyiNF0MLsN8qIRYrz:F0DATiNHrdQUwAVOERRDWPieTLsH6y
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.d363c2dc7eadf1fbfc9bee1983f948677d4495ec13682c6298cfc8647fa47b54.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.d363c2dc7eadf1fbfc9bee1983f948677d4495ec13682c6298cfc8647fa47b54.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\NEAS.d363c2dc7eadf1fbfc9bee1983f948677d4495ec13682c6298cfc8647fa47b54.exeC:\Users\Admin\AppData\Local\Temp\NEAS.d363c2dc7eadf1fbfc9bee1983f948677d4495ec13682c6298cfc8647fa47b54.exe -TA2⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2584 -s 5483⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2584 -ip 25841⤵