cc47085611490ad15b1692bce744b46e2144799dffdf4a0786c9e566d4005c64

Analysis

max time kernel
168s
max time network
186s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
05/12/2022, 05:40

Target
cc47085611490ad15b1692bce744b46e2144799dffdf4a0786c9e566d4005c64.exe
Size 32KB
Sample221205-gc9aqaag34
SHA256 cc47085611490ad15b1692bce744b46e2144799dffdf4a0786c9e566d4005c64
MD5 c428310a4891a09b3fe0d6af5f564919
SHA1 161fe35e18580c103dbc55dfcff47abf2a819499
SHA512 31e212587f02824513f22729ad4e67ec873b6f26ec09c31179eee324992165ac61d57340641a4d3ec2674bce9d710836679876b4e72465c7a44448f16c9619b7
SSDEEP 768:Ev5JPHUFUsAJEfMTkEfHEBgWcawUM+gX4FxDAFj3Y82yp5JtngQ:EvDvUikcYVcawUMFeAFj3Yez
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4112-132-0x0000000000400000-0x000000000041A000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4480	4112	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\cc47085611490ad15b1692bce744b46e2144799dffdf4a0786c9e566d4005c64.exe
"C:\Users\Admin\AppData\Local\Temp\cc47085611490ad15b1692bce744b46e2144799dffdf4a0786c9e566d4005c64.exe"
1⤵
PID:4112
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4112 -s 220
  2⤵
  - Program crash
  PID:4480

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4112 -ip 4112
1⤵
PID:5024

memory/4112-132-0x0000000000400000-0x000000000041A000-memory.dmp

Download