75d2d8b522903bc313be579b28f514d7438a44682bf3ae66c65914b48f47d8a3

Analysis

max time kernel
138s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2022, 18:10

Target

75d2d8b522903bc313be579b28f514d7438a44682bf3ae66c65914b48f47d8a3.exe
Size

863KB
MD5

27d0812ac2d4ea8f5f7ea37a91875060
SHA1

c2c7f3e0eb969fd88c6d3389f9ed09672524fc8d
SHA256

75d2d8b522903bc313be579b28f514d7438a44682bf3ae66c65914b48f47d8a3
SHA512

e929c7aff585a0103ecf20942d4db8710480fc935bd04659fca68294bbb24e1f7bc794270d55ab4b1bc03915c91b475df0d4e2de586222f4b571edf1981b9ef3
SSDEEP

12288:FQLXLPUEOGM9XDP35ghOsVeV4EpbBqSPS5rkNgqG0HArV888888888888W88888P:Crl7M9XDP3ussq4EpbBqSPSa3

Score

8^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2956-132-0x0000000000750000-0x0000000000829000-memory.dmp	upx
behavioral2/memory/2956-133-0x0000000000750000-0x0000000000829000-memory.dmp	upx
behavioral2/memory/2956-134-0x0000000000750000-0x0000000000829000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4984	2956	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\75d2d8b522903bc313be579b28f514d7438a44682bf3ae66c65914b48f47d8a3.exe
"C:\Users\Admin\AppData\Local\Temp\75d2d8b522903bc313be579b28f514d7438a44682bf3ae66c65914b48f47d8a3.exe"
1⤵
PID:2956
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2956 -s 1352
  2⤵
  - Program crash
  PID:4984

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2956 -ip 2956
1⤵
PID:4176

memory/2956-132-0x0000000000750000-0x0000000000829000-memory.dmp

Filesize
868KB

Download
memory/2956-133-0x0000000000750000-0x0000000000829000-memory.dmp

Filesize
868KB

Download
memory/2956-134-0x0000000000750000-0x0000000000829000-memory.dmp

Filesize
868KB

Download