Analysis
-
max time kernel
140s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
07/05/2024, 03:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5ee5cd816cd54292a5fe5d9597bad4b0_NEAS.exe
Resource
win7-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
5ee5cd816cd54292a5fe5d9597bad4b0_NEAS.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
-
Target
5ee5cd816cd54292a5fe5d9597bad4b0_NEAS.exe
-
Size
14KB
-
MD5
5ee5cd816cd54292a5fe5d9597bad4b0
-
SHA1
d14377cdfaba50c28f77c134d60cbed6af552771
-
SHA256
f05b8e7cd9f3583a1edf9641d9671572c4f5348a2f189a7bdb7ad76090ed81e0
-
SHA512
5f576b4fcd7699f20468210cc1db4fcae0218406b032663c5b368c0bc27897f56ea4e637e31840101c8af4d67354681ee1f931dce5c936101b978d510d83f697
-
SSDEEP
384:CJT6+f5rvs3mLba7a7a7a7a7a7add6tJZ8pdDE045HZWWW:E6w5kjeeeeeeTeJYA
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2316 920 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\5ee5cd816cd54292a5fe5d9597bad4b0_NEAS.exe"C:\Users\Admin\AppData\Local\Temp\5ee5cd816cd54292a5fe5d9597bad4b0_NEAS.exe"1⤵PID:920
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 920 -s 1842⤵
- Program crash
PID:2316
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 920 -ip 9201⤵PID:3076