90caf92cde9689fccd691d9e7baf9166c7767fabd5b1830cc53f2bc467ea9cc6

Analysis

max time kernel
91s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 22:16

Target

90caf92cde9689fccd691d9e7baf9166c7767fabd5b1830cc53f2bc467ea9cc6.exe
Size

815KB
MD5

bbf9998febd7f4b644edabb09ccb3812
SHA1

ee882af56f964c189c5e531d9fda9c07529548a2
SHA256

90caf92cde9689fccd691d9e7baf9166c7767fabd5b1830cc53f2bc467ea9cc6
SHA512

0849197789e2a54f92f2a707d95c1de745446b105c62443ce679d4f6167d1a5e4bd8abc24b2cebe3a926d904e074b15c97149d4e41054ad7d21dfa282c383947
SSDEEP

24576:GG2hitUl1SK7UphjZtT8p9y3mFgTbpQbzR9:GGhOSK7IhjrKy3ugTWbz

Score

8^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral2/memory/2808-132-0x0000000000400000-0x00000000007AA000-memory.dmp	upx
behavioral2/memory/2808-133-0x0000000000400000-0x00000000007AA000-memory.dmp	upx
behavioral2/memory/2808-134-0x0000000000400000-0x00000000007AA000-memory.dmp	upx

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2428 2808 WerFault.exe 90caf92cde9689fccd691d9e7baf9166c7767fabd5b1830cc53f2bc467ea9cc6.exe

pid	pid_target	process	target process
2428	2808	WerFault.exe	90caf92cde9689fccd691d9e7baf9166c7767fabd5b1830cc53f2bc467ea9cc6.exe

C:\Users\Admin\AppData\Local\Temp\90caf92cde9689fccd691d9e7baf9166c7767fabd5b1830cc53f2bc467ea9cc6.exe
"C:\Users\Admin\AppData\Local\Temp\90caf92cde9689fccd691d9e7baf9166c7767fabd5b1830cc53f2bc467ea9cc6.exe"
1⤵
PID:2808

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2808 -s 548
2⤵
- Program crash
PID:2428

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2808 -ip 2808
1⤵
PID:5012

memory/2808-132-0x0000000000400000-0x00000000007AA000-memory.dmp

Filesize
3.7MB

Download
memory/2808-133-0x0000000000400000-0x00000000007AA000-memory.dmp

Filesize
3.7MB

Download
memory/2808-134-0x0000000000400000-0x00000000007AA000-memory.dmp

Filesize
3.7MB

Download