083a202da6ed43e15b7cbfe632bd53be2813f0755b966253055f0742ee08c8c0

Analysis

max time kernel
91s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
04-10-2022 02:36

Target

083a202da6ed43e15b7cbfe632bd53be2813f0755b966253055f0742ee08c8c0.exe
Size

280KB
MD5

37ae801befa18b0368abe26bc8c3aba0
SHA1

bc2d1b07d9e1236405a47a695f2b2922095c2e75
SHA256

083a202da6ed43e15b7cbfe632bd53be2813f0755b966253055f0742ee08c8c0
SHA512

4b0b9fb3034b9df994dc71c2b08aa2735937d916bd1e3e8a0d6139d1874789c6068a0c2b0059b0fd1a7f966b53a6067f48626790b6e65d0bd2281116303c1756
SSDEEP

3072:U3Zd9Gu+9XFmuDXFqhKXXq/NYzi715n1GsIEOHPWHWs7k8rmup/pxcov1MO+Q:Ol+nmuhqcH1zMGslNnam/p6c

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/5068-132-0x0000000000400000-0x0000000000446000-memory.dmp	upx
behavioral2/memory/5068-133-0x0000000000400000-0x0000000000446000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4544	5068	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\083a202da6ed43e15b7cbfe632bd53be2813f0755b966253055f0742ee08c8c0.exe
"C:\Users\Admin\AppData\Local\Temp\083a202da6ed43e15b7cbfe632bd53be2813f0755b966253055f0742ee08c8c0.exe"
1⤵
PID:5068
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5068 -s 448
  2⤵
  - Program crash
  PID:4544

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 5068 -ip 5068
1⤵
PID:5088

memory/5068-132-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/5068-133-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download