2ad62c0a470e7f6f349e8dd99657298ebebc4ed7b9822d3c1618e6aec133eba6

Analysis

max time kernel
154s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06-12-2022 10:56

Target

2ad62c0a470e7f6f349e8dd99657298ebebc4ed7b9822d3c1618e6aec133eba6.exe
Size

821KB
MD5

e4f22e321ee3289590ac916b070645b6
SHA1

a368432d678de3602287bbe96739435c1d9197cd
SHA256

2ad62c0a470e7f6f349e8dd99657298ebebc4ed7b9822d3c1618e6aec133eba6
SHA512

2cc4fdca4e6bbcfc1633b9a561fde52e5fc94fa05a1b992fabbad04a38f2f7b850009efd9ffba3e07a09a2bbaf4855f3976c3a502591cd5de64a8e2f301e2839
SSDEEP

24576:ThEnpKZA8ohPmxePtShxHp/tU4ronokKBpV:ThEnB8ohPmxeFShxHAFno9D

Score

8^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/5080-132-0x0000000000400000-0x00000000007A8000-memory.dmp	upx
behavioral2/memory/5080-134-0x0000000000400000-0x00000000007A8000-memory.dmp	upx
behavioral2/memory/5080-135-0x0000000000400000-0x00000000007A8000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3108	5080	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\2ad62c0a470e7f6f349e8dd99657298ebebc4ed7b9822d3c1618e6aec133eba6.exe
"C:\Users\Admin\AppData\Local\Temp\2ad62c0a470e7f6f349e8dd99657298ebebc4ed7b9822d3c1618e6aec133eba6.exe"
1⤵
PID:5080
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5080 -s 496
  2⤵
  - Program crash
  PID:3108

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5080 -ip 5080
1⤵
PID:1808

memory/5080-132-0x0000000000400000-0x00000000007A8000-memory.dmp

Filesize
3.7MB

Download
memory/5080-134-0x0000000000400000-0x00000000007A8000-memory.dmp

Filesize
3.7MB

Download
memory/5080-135-0x0000000000400000-0x00000000007A8000-memory.dmp

Filesize
3.7MB

Download