3ffa1edc25ad524a17ec03cea2bca1370c91a43ccc497222dbce4edbf6420fbd | Triage

Analysis

max time kernel
129s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
07-05-2024 06:29

Sharing

Report Analysis Logs

General

Target

81d0850dcd5da03f41cab2b8a3016490_NEAS.exe
Size

6KB
MD5

81d0850dcd5da03f41cab2b8a3016490
SHA1

829f67dde84966b5d37c9568de517414eca6e0fe
SHA256

3ffa1edc25ad524a17ec03cea2bca1370c91a43ccc497222dbce4edbf6420fbd
SHA512

fbeff4b10a0b91aa4ccae335925fa3344d95f0410a889dfe4247db7231a212fabf87ec4dc3595031f53ad1d54652d9f2714936bace8c315df6bfb010e4a1f377
SSDEEP

96:Ryj5WUYYL1lNQMdWAWR1gZLCijY0l+bQVSaKF+dzNt:4tsMAAWwWCdRVSapX

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1456	4312	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\81d0850dcd5da03f41cab2b8a3016490_NEAS.exe
"C:\Users\Admin\AppData\Local\Temp\81d0850dcd5da03f41cab2b8a3016490_NEAS.exe"
1⤵
PID:4312
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4312 -s 884
  2⤵
  - Program crash
  PID:1456

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4312 -ip 4312
1⤵
PID:4148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4312-0-0x000000007493E000-0x000000007493F000-memory.dmp

Filesize
4KB

Download
memory/4312-1-0x00000000004A0000-0x00000000004A8000-memory.dmp

Filesize
32KB

Download