Overview

overview

3

Static

static

3

NEAS.133e2...b0.exe

windows7-x64

3

NEAS.133e2...b0.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    160s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/11/2023, 03:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    NEAS.133e2d849eae3f4ddeaa6f0becff66b0.exe

  • Size

    112KB

  • MD5

    133e2d849eae3f4ddeaa6f0becff66b0

  • SHA1

    e18425428fb602659ccc3c8e4ee55877c3535088

  • SHA256

    0aa0cfdfa3133802b45009c42ae0b4ebe6766c4341271ac4a5fe676d9df617db

  • SHA512

    08f1f73c26a837dacd84addbe366dd49b6fbbdb7a2fbe6412c081c409b53f8c8c406f61ee9cbc574d490f000db6aaac00c714a38d4881ed29f7f8a1b365de2cb

  • SSDEEP

    768:15X3nnYG7MlSdn/jpSKOojKD7H5ZczpbOuf19jbEpDWIajDsXPhGPhGPhGPhtU:7P7M8d/rOzPzypyCHjKDjfQQQtU

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.133e2d849eae3f4ddeaa6f0becff66b0.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.133e2d849eae3f4ddeaa6f0becff66b0.exe"
    1⤵
      PID:2540
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2540 -s 216
        2⤵
        • Program crash
        PID:4124
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2540 -s 220
        2⤵
        • Program crash
        PID:180
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2540 -ip 2540
      1⤵
        PID:2060
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 2540 -ip 2540
        1⤵
          PID:3408

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/2540-0-0x0000000000400000-0x000000000041C000-memory.dmp

                Filesize

                112KB

                Download