ad3bcb65313043b1a43b8fb210f3a20a87df8a8145ed9a18b086d0859616caa2

Analysis

max time kernel
140s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
23-10-2023 21:16

Target

001e9becdd7d9887c6fbe487073ad3dc068124a5300f4128d9ed32db4f63f793.exe
Size

31KB
MD5

6ad501cfa7dad1014e008cbfd988404c
SHA1

27be2f03ec2e1c0ecf566f0f3fd3c0bdf75a9fb8
SHA256

001e9becdd7d9887c6fbe487073ad3dc068124a5300f4128d9ed32db4f63f793
SHA512

798838c0eea397797a2daaf98a77344e70e75b18304a7cb864a3920b5c255721b84220ea550e61715f92fb8f28ca2d91522e138fbf8d76d8e74ad5ecf8410307
SSDEEP

768:Ik+HPVo3WDZ7g1p4nZPTB7cZt7L0BlYfHCkr:n+H9ou7g1p4nr74OLYfHC6

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral1/memory/2892-0-0x000000002AA00000-0x000000002AA1F000-memory.dmp	upx
behavioral1/memory/2892-2-0x000000002AA00000-0x000000002AA1F000-memory.dmp	upx

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2032 2892 WerFault.exe 001e9becdd7d9887c6fbe487073ad3dc068124a5300f4128d9ed32db4f63f793.exe

pid	pid_target	process	target process
2032	2892	WerFault.exe	001e9becdd7d9887c6fbe487073ad3dc068124a5300f4128d9ed32db4f63f793.exe

C:\Users\Admin\AppData\Local\Temp\001e9becdd7d9887c6fbe487073ad3dc068124a5300f4128d9ed32db4f63f793.exe
"C:\Users\Admin\AppData\Local\Temp\001e9becdd7d9887c6fbe487073ad3dc068124a5300f4128d9ed32db4f63f793.exe"
1⤵
PID:2892

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2892 -s 280
2⤵
- Program crash
PID:2032

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2892 -ip 2892
1⤵
PID:1656

memory/2892-0-0x000000002AA00000-0x000000002AA1F000-memory.dmp

Filesize
124KB

Download
memory/2892-1-0x0000000000660000-0x0000000000663000-memory.dmp

Filesize
12KB

Download
memory/2892-2-0x000000002AA00000-0x000000002AA1F000-memory.dmp

Filesize
124KB

Download