75f6d9464cdf40b6474becac31936bca100af1305588ee4ced51f12ff8c3791d

Analysis

max time kernel
142s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
25-12-2023 20:24

Target

3b2d8a56a3a89dd65be3bfd83792ef9d.exe
Size

55KB
MD5

3b2d8a56a3a89dd65be3bfd83792ef9d
SHA1

87dfdb598fabe189b2e31f64763d4657331b7e5f
SHA256

75f6d9464cdf40b6474becac31936bca100af1305588ee4ced51f12ff8c3791d
SHA512

2b8403666f47ddbe6dbc17bd630dffcabc46f934084c8cc478225cd845df005d8869dcad68312d4c2d85dcbdda7aa8b94a2eb72dd97d6c916a22d4ced6bde002
SSDEEP

384:qWOx/gUiuNoVdMbwyzpoW/kgARucVf8f/jcMpL/h93ppjrQMxVuOJ5wmD8xco8Wt:4biuNoVesW4RRgjcKhtPHu68xco1nft

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2280-0-0x0000000000400000-0x000000000040F000-memory.dmp	upx
behavioral2/memory/2280-1-0x0000000000400000-0x000000000040F000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1876	2280	WerFault.exe	40

C:\Users\Admin\AppData\Local\Temp\3b2d8a56a3a89dd65be3bfd83792ef9d.exe
"C:\Users\Admin\AppData\Local\Temp\3b2d8a56a3a89dd65be3bfd83792ef9d.exe"
1⤵
PID:2280
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2280 -s 524
  2⤵
  - Program crash
  PID:1876

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 2280 -ip 2280
1⤵
PID:2500

memory/2280-0-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/2280-1-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download