d8409f26f2f06ac6a3e12c03645d0728e8733f59b88bd68a8f1f3942f202cb27

Analysis

max time kernel
146s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
27/11/2022, 07:02

Target

d8409f26f2f06ac6a3e12c03645d0728e8733f59b88bd68a8f1f3942f202cb27.exe
Size

812KB
MD5

505f3f1859d913475a010396c48020d8
SHA1

722b374ba7904c4774201921bdda684cb576a0f8
SHA256

d8409f26f2f06ac6a3e12c03645d0728e8733f59b88bd68a8f1f3942f202cb27
SHA512

b3e399413267b3c7d77dd15fd282dca7e322214af6d665041ff925a1d3038105798fb8d6629b71af78f3cdc1f185c8ed09f8c54f19e25d09dea1eceb593a5a5d
SSDEEP

24576:MeSYtyp4W+BwFAT9JvKN6hPmZphTa8YS0Q61B:EYo5eTatZbTHYS0R

Score

8^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4800-132-0x0000000000400000-0x00000000007AE000-memory.dmp	upx
behavioral2/memory/4800-133-0x0000000000400000-0x00000000007AE000-memory.dmp	upx
behavioral2/memory/4800-134-0x0000000000400000-0x00000000007AE000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4816	4800	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\d8409f26f2f06ac6a3e12c03645d0728e8733f59b88bd68a8f1f3942f202cb27.exe
"C:\Users\Admin\AppData\Local\Temp\d8409f26f2f06ac6a3e12c03645d0728e8733f59b88bd68a8f1f3942f202cb27.exe"
1⤵
PID:4800
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4800 -s 532
  2⤵
  - Program crash
  PID:4816

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4800 -ip 4800
1⤵
PID:4112

memory/4800-132-0x0000000000400000-0x00000000007AE000-memory.dmp

Filesize
3.7MB

Download
memory/4800-133-0x0000000000400000-0x00000000007AE000-memory.dmp

Filesize
3.7MB

Download
memory/4800-134-0x0000000000400000-0x00000000007AE000-memory.dmp

Filesize
3.7MB

Download