ee6241ce48cc3065055c9e85c991521f5a9bdcc00580fed1ae04d2e558caeb83

Analysis

max time kernel
140s
max time network
175s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 03:49

Target

0d75c8c21160ad90f08371f2ed5827f2.exe
Size

92KB
MD5

0d75c8c21160ad90f08371f2ed5827f2
SHA1

88b6f3bc6370b9bbe7725fa2ca18c8e90949d551
SHA256

ee6241ce48cc3065055c9e85c991521f5a9bdcc00580fed1ae04d2e558caeb83
SHA512

8602238e4e5b1b5258f64d598764552efcc97068fa6432e0ee645cfbfea56cd9917c92e63d09c82757b8966b686cec217e9750b19f44ae06fa37513d1821d5ee
SSDEEP

1536:SKcR4mjD9r823Fs8TRN5gMDF5NHDTgoQmt5vcIp/PC4QWUZtecIlfxlTF2Dyan:SKcWmjRrz33TlRnVnis5vbwmUacInTFA

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4088-0-0x0000000000880000-0x0000000000897000-memory.dmp	upx
behavioral2/memory/4088-1-0x0000000000880000-0x0000000000897000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2576	4088	WerFault.exe	86

C:\Users\Admin\AppData\Local\Temp\0d75c8c21160ad90f08371f2ed5827f2.exe
"C:\Users\Admin\AppData\Local\Temp\0d75c8c21160ad90f08371f2ed5827f2.exe"
1⤵
PID:4088
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4088 -s 352
  2⤵
  - Program crash
  PID:2576

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4088 -ip 4088
1⤵
PID:4296

memory/4088-0-0x0000000000880000-0x0000000000897000-memory.dmp

Filesize
92KB

Download
memory/4088-1-0x0000000000880000-0x0000000000897000-memory.dmp

Filesize
92KB

Download