9e8a2da5b8d4461d9227fbf89b6f5f74cf244dda927a32881cfa3b7bcf39dcee

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 21:34

Target

9e8a2da5b8d4461d9227fbf89b6f5f74cf244dda927a32881cfa3b7bcf39dcee.exe
Size

815KB
MD5

f847a5ed929242f4189f11de3398545e
SHA1

a86e8ba09a94a4990fc59786d307fce3d0cd594a
SHA256

9e8a2da5b8d4461d9227fbf89b6f5f74cf244dda927a32881cfa3b7bcf39dcee
SHA512

77c3a3eec117a1ad1c7d9e98711e6077ba9564397501aaaa7a010606375daf555919b738a39cbf9ad71dd53bdcd0631fb95aaa929a6555f80cf58f9171994854
SSDEEP

24576:a/ZB8X5HK7RPMvO05nv6gvAhpeoLP3awNHUPY3:/LegvAhwASY3

Score

8^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral2/memory/2496-132-0x0000000000400000-0x000000000063E000-memory.dmp	upx
behavioral2/memory/2496-134-0x0000000000400000-0x000000000063E000-memory.dmp	upx
behavioral2/memory/2496-135-0x0000000000400000-0x000000000063E000-memory.dmp	upx

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2224 2496 WerFault.exe 9e8a2da5b8d4461d9227fbf89b6f5f74cf244dda927a32881cfa3b7bcf39dcee.exe

pid	pid_target	process	target process
2224	2496	WerFault.exe	9e8a2da5b8d4461d9227fbf89b6f5f74cf244dda927a32881cfa3b7bcf39dcee.exe

C:\Users\Admin\AppData\Local\Temp\9e8a2da5b8d4461d9227fbf89b6f5f74cf244dda927a32881cfa3b7bcf39dcee.exe
"C:\Users\Admin\AppData\Local\Temp\9e8a2da5b8d4461d9227fbf89b6f5f74cf244dda927a32881cfa3b7bcf39dcee.exe"
1⤵
PID:2496

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2496 -s 496
2⤵
- Program crash
PID:2224

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2496 -ip 2496
1⤵
PID:1640

memory/2496-132-0x0000000000400000-0x000000000063E000-memory.dmp

Filesize
2.2MB

Download
memory/2496-134-0x0000000000400000-0x000000000063E000-memory.dmp

Filesize
2.2MB

Download
memory/2496-135-0x0000000000400000-0x000000000063E000-memory.dmp

Filesize
2.2MB

Download