aa8400440ade71111a512b073468978c0cd197f1acfc4aeb3083a7759abc9cd5

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
30-10-2022 05:14

Target

aa8400440ade71111a512b073468978c0cd197f1acfc4aeb3083a7759abc9cd5.exe
Size

454KB
MD5

a2623c1dc19d09483306f90099d86bfc
SHA1

7365411c2d845efb66b22a85134b70356f882795
SHA256

aa8400440ade71111a512b073468978c0cd197f1acfc4aeb3083a7759abc9cd5
SHA512

fdb6de17873dae2650e9c16c9f2f7515e111179bbed7fa4384d6a0f54c3df1b993a5021f43d3bca74d79c4226e8c31b158b8576b85e5fd4c5abd64bbf8ea3932
SSDEEP

12288:yy3QPozshSbiXQpfe1pkMLvCdk5kHDMlNYu:y71gU1p9Cuifu

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3328-132-0x0000000000400000-0x000000000041E000-memory.dmp	upx
behavioral2/memory/3328-133-0x0000000000400000-0x000000000041E000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1364	3328	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\aa8400440ade71111a512b073468978c0cd197f1acfc4aeb3083a7759abc9cd5.exe
"C:\Users\Admin\AppData\Local\Temp\aa8400440ade71111a512b073468978c0cd197f1acfc4aeb3083a7759abc9cd5.exe"
1⤵
PID:3328
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3328 -s 420
  2⤵
  - Program crash
  PID:1364

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 3328 -ip 3328
1⤵
PID:616

memory/3328-132-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download
memory/3328-133-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download