72abe1282f23d5ae79a47a4770c3de5397b32d0960fdc6e9f59d3de72b858e10

Analysis

max time kernel
143s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 04:50

Target

0f11fada85e039f0facfebe7c64e3458.exe
Size

472KB
MD5

0f11fada85e039f0facfebe7c64e3458
SHA1

9767910e0b5e94252835492f2501439af34a130f
SHA256

72abe1282f23d5ae79a47a4770c3de5397b32d0960fdc6e9f59d3de72b858e10
SHA512

14b7dace4c0e8ed2036b48b5e65258f518e2f022964e534d6689afe7ecd9aa137be03977175100fc5f0f5296ce0afe018b7c1e49d6d09abba622fb74e0146a62
SSDEEP

6144:eR14EKSxaLepD4pFNHuVVE8XdSRo36dug6W4KHDolRp/9q/K5UOBk:ewEhliTiWyvKQWnjolL90QBk

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3160-0-0x0000000000400000-0x000000000046B000-memory.dmp	upx
behavioral2/memory/3160-1-0x0000000000400000-0x000000000046B000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1132	3160	WerFault.exe	88

C:\Users\Admin\AppData\Local\Temp\0f11fada85e039f0facfebe7c64e3458.exe
"C:\Users\Admin\AppData\Local\Temp\0f11fada85e039f0facfebe7c64e3458.exe"
1⤵
PID:3160
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3160 -s 472
  2⤵
  - Program crash
  PID:1132

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 3160 -ip 3160
1⤵
PID:4508

memory/3160-0-0x0000000000400000-0x000000000046B000-memory.dmp

Filesize
428KB

Download
memory/3160-1-0x0000000000400000-0x000000000046B000-memory.dmp

Filesize
428KB

Download