b5f5c11adbc1a57b94d298c396410c04cd4fccb53133872467fa68c3f4daf941

Analysis

max time kernel
122s
max time network
131s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
18/11/2023, 05:38

Target

NEAS.68dc81a2de67f20b52d9ff7fce0fb440.exe
Size

204KB
MD5

68dc81a2de67f20b52d9ff7fce0fb440
SHA1

8f031145b33a90adb9fd80ab5f4aa16bfae51df7
SHA256

b5f5c11adbc1a57b94d298c396410c04cd4fccb53133872467fa68c3f4daf941
SHA512

3af9ba153fc1061ad7879bd59011defd89536321a1a0b07d33c8af594abbb33f9d3da88f2ed4e28ceffad6ebe26d7885ac054695f94ed0975fca00fbe33210f7
SSDEEP

768:76cPsAifwZJ0cZGUk6vJOBdhqm2PeaiBWJQekcQ0U02p/1H5ajXdnh:GccYH/Gnc+hmlJQekfT02LUh

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2228	2224	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2224 wrote to memory of 2228	2224	NEAS.68dc81a2de67f20b52d9ff7fce0fb440.exe	28
PID 2224 wrote to memory of 2228	2224	NEAS.68dc81a2de67f20b52d9ff7fce0fb440.exe	28
PID 2224 wrote to memory of 2228	2224	NEAS.68dc81a2de67f20b52d9ff7fce0fb440.exe	28
PID 2224 wrote to memory of 2228	2224	NEAS.68dc81a2de67f20b52d9ff7fce0fb440.exe	28

C:\Users\Admin\AppData\Local\Temp\NEAS.68dc81a2de67f20b52d9ff7fce0fb440.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.68dc81a2de67f20b52d9ff7fce0fb440.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2224
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2224 -s 36
  2⤵
  - Program crash
  PID:2228

memory/2224-0-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download