6bf0fd2beb9b973eda6ab94568bfaa8c7f4f0ff9089a51e1f858954406bf511c

Analysis

max time kernel
136s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25-12-2023 02:37

Target

005ecd273ca501c3479e6e9009fd96ba.exe
Size

308KB
MD5

005ecd273ca501c3479e6e9009fd96ba
SHA1

8dcf2005dc64fdae5457458607c426e450ffdc27
SHA256

6bf0fd2beb9b973eda6ab94568bfaa8c7f4f0ff9089a51e1f858954406bf511c
SHA512

e49fda809b5b4f635bff5d766c5d3be07a3136eb76f750270a0d2a48cb3e9a9547551246cb936ed6693fc1e3e8e2ba3c3a5f0adf0ce5e9eaf440966c174d14f7
SSDEEP

6144:uP2bvKyCPkpBYR/z1QLh7BXetvvAYGxN6gaaPN5rZQgjFzNC5uiS9:uP2bvO8PE/KF7Nu8NUg5fjys

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2104-3-0x0000000010000000-0x0000000010020000-memory.dmp	upx
behavioral2/memory/2104-2-0x0000000010000000-0x0000000010020000-memory.dmp	upx
behavioral2/memory/2104-0-0x0000000010000000-0x0000000010020000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1364	2104	WerFault.exe	14

C:\Users\Admin\AppData\Local\Temp\005ecd273ca501c3479e6e9009fd96ba.exe
"C:\Users\Admin\AppData\Local\Temp\005ecd273ca501c3479e6e9009fd96ba.exe"
1⤵
PID:2104
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2104 -s 312
  2⤵
  - Program crash
  PID:1364

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2104 -ip 2104
1⤵
PID:4944

memory/2104-3-0x0000000010000000-0x0000000010020000-memory.dmp

Filesize
128KB

Download
memory/2104-2-0x0000000010000000-0x0000000010020000-memory.dmp

Filesize
128KB

Download
memory/2104-0-0x0000000010000000-0x0000000010020000-memory.dmp

Filesize
128KB

Download