4cc5e2db8ba5c8fcdbe0083d1891a6b18ce490698ce43be828435b7620548dac

Analysis

max time kernel
151s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 19:06

Target

4cc5e2db8ba5c8fcdbe0083d1891a6b18ce490698ce43be828435b7620548dac.exe
Size

447KB
MD5

1ed9abe99f90bd5ed3e3a816ced33903
SHA1

ed5bb934790ed994912b65a895d20402b4fc86c6
SHA256

4cc5e2db8ba5c8fcdbe0083d1891a6b18ce490698ce43be828435b7620548dac
SHA512

39a611f6ebd83c9cd7d3d2e0630b74c186a4cae52aaef1b58722dd306c4a253e333ba16b3104faf0d4e8bde08e8109a6f32f310dcd3d3612ccd3fb046dc79f60
SSDEEP

6144:yo0XjJgmx9jfumGiKW+s+9H/WdLb9lJ9uEji0s5hmylPdiloD:ybGHJDfuX939uewlVile

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral2/memory/3524-132-0x0000000001000000-0x0000000001098000-memory.dmp	upx

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4656 3524 WerFault.exe 4cc5e2db8ba5c8fcdbe0083d1891a6b18ce490698ce43be828435b7620548dac.exe

pid	pid_target	process	target process
4656	3524	WerFault.exe	4cc5e2db8ba5c8fcdbe0083d1891a6b18ce490698ce43be828435b7620548dac.exe

C:\Users\Admin\AppData\Local\Temp\4cc5e2db8ba5c8fcdbe0083d1891a6b18ce490698ce43be828435b7620548dac.exe
"C:\Users\Admin\AppData\Local\Temp\4cc5e2db8ba5c8fcdbe0083d1891a6b18ce490698ce43be828435b7620548dac.exe"
1⤵
PID:3524

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3524 -s 456
2⤵
- Program crash
PID:4656

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3524 -ip 3524
1⤵
PID:1984

memory/3524-132-0x0000000001000000-0x0000000001098000-memory.dmp

Filesize
608KB

Download