3a20dc39ed50dd045a21dbd6d61d2d10b42dca7c688aa3365ca56e59f4126ddd | Triage

Analysis

max time kernel
176s
max time network
170s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
17/11/2023, 19:07

Sharing

Report Analysis Logs

General

Target

NEAS.8dce0f6f96597a7985169affc1eae0d0.exe
Size

14KB
MD5

8dce0f6f96597a7985169affc1eae0d0
SHA1

ec87a4f5e6c1488217702b46b6b9757d994ffcfe
SHA256

3a20dc39ed50dd045a21dbd6d61d2d10b42dca7c688aa3365ca56e59f4126ddd
SHA512

367bff6b4f95cad32d00e1b7197495310b785469ca7c74877b54ec12b6516052a35a212c640f817a41d5238d63eb87bc47a1698f338f7dfc781b2d67f2c5d555
SSDEEP

384:CvSdtYb4kTw5k11XhhhhhsZCOUaXqDE045HHfIfIfIf:qWiUkTwzkOUaXwA

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1664	2100	WerFault.exe	85

C:\Users\Admin\AppData\Local\Temp\NEAS.8dce0f6f96597a7985169affc1eae0d0.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.8dce0f6f96597a7985169affc1eae0d0.exe"
1⤵
PID:2100
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2100 -s 248
  2⤵
  - Program crash
  PID:1664

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2100 -ip 2100
1⤵
PID:2760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2100-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download