7ad5f5ead9ba8996004761670a8e9d30818c9b006ffb9e7f08858834632a111a

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
07-05-2024 15:46

Target

ceeb229751e181e8a4d625318b7b8170_NEAS.exe
Size

472KB
MD5

ceeb229751e181e8a4d625318b7b8170
SHA1

ccd135fef3c12eda65a9ac3731874e74da546263
SHA256

7ad5f5ead9ba8996004761670a8e9d30818c9b006ffb9e7f08858834632a111a
SHA512

9af866a781af00224a58b79674c3a26c4b1bc5af8f8e0288641552cd0d75f7e8438d3a28269926e9a93556694db23c554f0ced6df9db44e01a0c17095f031458
SSDEEP

3072:t8RinudiP52xx67lLdiiHDoVtpC8phbC/hCNy+7J:ykgiPA6RgPVjC8pgq

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process
2476	1500	WerFault.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1500 wrote to memory of 2476	1500	ceeb229751e181e8a4d625318b7b8170_NEAS.exe	28
PID 1500 wrote to memory of 2476	1500	ceeb229751e181e8a4d625318b7b8170_NEAS.exe	28
PID 1500 wrote to memory of 2476	1500	ceeb229751e181e8a4d625318b7b8170_NEAS.exe	28
PID 1500 wrote to memory of 2476	1500	ceeb229751e181e8a4d625318b7b8170_NEAS.exe	28

C:\Users\Admin\AppData\Local\Temp\ceeb229751e181e8a4d625318b7b8170_NEAS.exe
"C:\Users\Admin\AppData\Local\Temp\ceeb229751e181e8a4d625318b7b8170_NEAS.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1500
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1500 -s 36
  2⤵
  - Program crash
  PID:2476

memory/1500-1-0x0000000000400000-0x0000000000476000-memory.dmp

Filesize
472KB

Download