6e57c5beb13822c84b5a6e991e5d56db1978b03d717a11a0887edc24a40fca08

Analysis

max time kernel
157s
max time network
174s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 03:40

Target

6e57c5beb13822c84b5a6e991e5d56db1978b03d717a11a0887edc24a40fca08.exe
Size

71KB
MD5

a8a08ec0efc54685d0eacb1c785a2fc3
SHA1

368066f19a8d2a756241901e39b0b3a8c06ef171
SHA256

6e57c5beb13822c84b5a6e991e5d56db1978b03d717a11a0887edc24a40fca08
SHA512

9b531ab71f88aad43e7cfb304e040fef76530dd4d1c22121ad0be473ef610c262c71cfeabe4285f89684402c73e6340b3d937dbfb7f18bb6723b7803eb6f4f2c
SSDEEP

1536:h6dKLagc/2MyhjUx+odnbZzxSl2OBGjkQI9naxNEmu:h6diIqUnFxb0G1xxNEH

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral2/memory/1748-132-0x0000000000400000-0x0000000000427000-memory.dmp	upx
behavioral2/memory/1748-134-0x0000000000400000-0x0000000000427000-memory.dmp	upx

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4216 1748 WerFault.exe 6e57c5beb13822c84b5a6e991e5d56db1978b03d717a11a0887edc24a40fca08.exe

pid	pid_target	process	target process
4216	1748	WerFault.exe	6e57c5beb13822c84b5a6e991e5d56db1978b03d717a11a0887edc24a40fca08.exe

C:\Users\Admin\AppData\Local\Temp\6e57c5beb13822c84b5a6e991e5d56db1978b03d717a11a0887edc24a40fca08.exe
"C:\Users\Admin\AppData\Local\Temp\6e57c5beb13822c84b5a6e991e5d56db1978b03d717a11a0887edc24a40fca08.exe"
1⤵
PID:1748
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1748 -s 216
  2⤵
  - Program crash
  PID:4216

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1748 -ip 1748
1⤵
PID:3676

memory/1748-132-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download
memory/1748-133-0x0000000002160000-0x0000000002164000-memory.dmp

Filesize
16KB

Download
memory/1748-134-0x0000000000400000-0x0000000000427000-memory.dmp

Filesize
156KB

Download