4d4756ecb5a682ca454921995cb87db64566416d61bc8c56461c7d145c96e9fd

Analysis

max time kernel
190s
max time network
180s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 12:02

Target

4d4756ecb5a682ca454921995cb87db64566416d61bc8c56461c7d145c96e9fd.exe
Size

74KB
MD5

f116cedde9163897dc12ad927c24b393
SHA1

ed1d329cf0ccdbfc8f63d6b91f2c22fb223dec7c
SHA256

4d4756ecb5a682ca454921995cb87db64566416d61bc8c56461c7d145c96e9fd
SHA512

4cedd4f90835c127f5525461ce7a47990da59af8bcb7910814457e228edf53090773ad2c2bc4ae4ab46b23db407461663dca481c2ceeba70e0c14dfb8c583c95
SSDEEP

1536:2+hzRsibKplyXTq8OGRnsPFG+RODTb7MXL5uXZnzEwBdKCEp:lROzoTq0+RO7IwnYwB/6

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral2/memory/1288-132-0x0000000000400000-0x0000000000433000-memory.dmp	upx

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4200 1288 WerFault.exe 4d4756ecb5a682ca454921995cb87db64566416d61bc8c56461c7d145c96e9fd.exe

pid	pid_target	process	target process
4200	1288	WerFault.exe	4d4756ecb5a682ca454921995cb87db64566416d61bc8c56461c7d145c96e9fd.exe

C:\Users\Admin\AppData\Local\Temp\4d4756ecb5a682ca454921995cb87db64566416d61bc8c56461c7d145c96e9fd.exe
"C:\Users\Admin\AppData\Local\Temp\4d4756ecb5a682ca454921995cb87db64566416d61bc8c56461c7d145c96e9fd.exe"
1⤵
PID:1288

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1288 -s 280
2⤵
- Program crash
PID:4200

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 204 -p 1288 -ip 1288
1⤵
PID:4888

memory/1288-132-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download