248453ef29a32c4c462027e45ccce7b4f957c4fa56c729b2473d1cfd2a498d79

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
17/11/2023, 19:35

Target

NEAS.8cccce28e7ee9365e9234dc829e9ae90.exe
Size

376KB
MD5

8cccce28e7ee9365e9234dc829e9ae90
SHA1

657b052f2cbc32a87bf7c1de362c2d8670444480
SHA256

248453ef29a32c4c462027e45ccce7b4f957c4fa56c729b2473d1cfd2a498d79
SHA512

b6aeb55414baed9e2d21def5b0898aa33e762bed8adec7faf5cef4553712a7e1a4b211175b8f3b333326613480723502287df630b52094ca2b5ee9112db67e3e
SSDEEP

1536:2sASwKScoNSLDVaSBn/xv/LkU0frbTZiksbjd/06gGrP5jycradeO/pN/YO/:2BSwx8HjxnLmik2d86gGrhjQdd/pNb/

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2120	2244	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 2120	2244	NEAS.8cccce28e7ee9365e9234dc829e9ae90.exe	28
PID 2244 wrote to memory of 2120	2244	NEAS.8cccce28e7ee9365e9234dc829e9ae90.exe	28
PID 2244 wrote to memory of 2120	2244	NEAS.8cccce28e7ee9365e9234dc829e9ae90.exe	28
PID 2244 wrote to memory of 2120	2244	NEAS.8cccce28e7ee9365e9234dc829e9ae90.exe	28

C:\Users\Admin\AppData\Local\Temp\NEAS.8cccce28e7ee9365e9234dc829e9ae90.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.8cccce28e7ee9365e9234dc829e9ae90.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2244 -s 36
  2⤵
  - Program crash
  PID:2120

memory/2244-0-0x0000000000400000-0x000000000045E000-memory.dmp

Filesize
376KB

Download