06c45de5c41806333e7f2d749bdce9948cdbefefb08d0ba89c893903452c2074

Analysis

max time kernel
143s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
06/01/2024, 11:46

Target

4626b829c4220ea34c80ac66ddefb46d.exe
Size

2.1MB
MD5

4626b829c4220ea34c80ac66ddefb46d
SHA1

e863badc439b7eaefca110bee68704ece981b0b4
SHA256

06c45de5c41806333e7f2d749bdce9948cdbefefb08d0ba89c893903452c2074
SHA512

3f0540a6c30ea33a93d13cf0f37565ff5a7da2c8d6b8294b18e420c9a9f63d379a969218ea0cc93e70d888505d830c5af29495d5c3afb0c9c7aa0ea9f2ea8572
SSDEEP

49152:y4qvWlPMYhYRLXV7nC//01Wb4QOlIXff1JGkFxwZ:yClPKRzNojzXff1JFFC

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4592-0-0x0000000000400000-0x00000000008E1000-memory.dmp	upx
behavioral2/memory/4592-5-0x0000000000400000-0x00000000008E1000-memory.dmp	upx

Program crash 2 IoCs

pid	pid_target	Process	procid_target
1976	4592	WerFault.exe	86
5372	4592	WerFault.exe	86

C:\Users\Admin\AppData\Local\Temp\4626b829c4220ea34c80ac66ddefb46d.exe
"C:\Users\Admin\AppData\Local\Temp\4626b829c4220ea34c80ac66ddefb46d.exe"
1⤵
PID:4592
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4592 -s 624
  2⤵
  - Program crash
  PID:1976
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4592 -s 624
  2⤵
  - Program crash
  PID:5372

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4592 -ip 4592
1⤵
PID:1324

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 4592 -ip 4592
1⤵
PID:5260

memory/4592-0-0x0000000000400000-0x00000000008E1000-memory.dmp

Filesize
4.9MB

Download
memory/4592-1-0x0000000002690000-0x000000000276C000-memory.dmp

Filesize
880KB

Download
memory/4592-4-0x0000000002690000-0x000000000276C000-memory.dmp

Filesize
880KB

Download
memory/4592-6-0x0000000000400000-0x00000000008E1000-memory.dmp

Filesize
4.9MB

Download
memory/4592-5-0x0000000000400000-0x00000000008E1000-memory.dmp

Filesize
4.9MB

Download
memory/4592-7-0x00000000009D0000-0x00000000009D1000-memory.dmp

Filesize
4KB

Download
memory/4592-3-0x00000000009D0000-0x00000000009D1000-memory.dmp

Filesize
4KB

Download
memory/4592-8-0x0000000000400000-0x00000000008E1000-memory.dmp

Filesize
4.9MB

Download
memory/4592-2-0x0000000002690000-0x000000000276C000-memory.dmp

Filesize
880KB

Download
memory/4592-9-0x0000000000400000-0x00000000008E1000-memory.dmp

Filesize
4.9MB

Download
memory/4592-10-0x0000000002690000-0x000000000276C000-memory.dmp

Filesize
880KB

Download